VPN Client authentication with ISE

[Suptech]

Hi,

I have configured our on-prem Cisco ISE server for RADIUS client authentication when users connect using Secure Client. The VPN authentication requests reach the ISE server, the user is correctly authenticated and ISE returns an "Access-Accept" to Secure Access, however the Secure Client keeps asking for the credentials to the user.

In the Remote Access logs I see failed connection events, the event details says "Authorization Check" and the error code is "ASA-6-113005". 

What can be failing?

Regards.

[Legusol]

Did you happen to get a resolution to this issue? We are setting up a RAVPN profile with our on-prem ISE and we are seeing the same problem. ISE provides "Accecc-Accept" but SA RA logs show the "ASA-6-113005" error.

Thanks in advance!

[MHM Cisco World]

Make new post please 

MHM

[Suptech]

Hi @Legusol ,

We managed to fix the issue. It was as easy as including the local domain with the username, so instead of "username" you enter "username@local.domain". That's it.

Regards