AnyConnect Machine Info Gathering?

[Aa4222282]

We have Cisco AnyConnect setup without any device/cert authentication. In trying to lockdown the AnyConnect further, I'd like to work with our network engineer to pull information on usage oh how many people are using AnyConnect on non-company issues laptops. Is there anyway to gather logs from the ASA that shows the machine name or other machine details of the connecting client?

Thanks! 

[Panos Bouras]

Hi,

I believe that your best bet is to use ISE to do posturing or chaining.

Anyconnect provides the following info via ACIDex, I found them limited

AnyConnect Identity Extensions (ACIDex) for Non-Mobile Platforms 

There might be a way to use internal CA certificates for VPN authentication as to ensure which user is using corporate endpoint.

Also check this thread:

https://community.cisco.com/t5/identity-services-engine-ise/validating-anyconnect-identity-extensions-acidex-attributes/td-p/3567472