Hello all
I am attempting to get the HostScan posture assessment working so we can check that any device connecting to the ASA is a valid corporate asset.
I have installed the posture module onto our test client machine (Windows 8.1) using the following software:
anyconnect-posture-win-4.0.00061-pre-deploy-k9
Then in ASDM under Remote Access VPN > Host Scan Image I have uploaded the following package:
disk0:/hostscan_3.1.06073-k9.pkg
...and ticked the box 'Enable Host Scan/CSD'.
Under Remote Access VPN > Secure Desktop Manager I have configured an initial simple Prelogin policy to test it working, this simply just checks that the OS is Windows 8. A success should map this user to a Group Policy I have created that is mapped to a Connection Profile.
So, with all that said, when I try to connect I see that the AnyConnect client going through the motions: "Posture Assessment: Checking for updates....", after which I get a pop-up and error message:
"Posture Assessment Failed: Unable to get the available CSD version from the secure gateway"
A bit stumped here and haven't quite found much on the web as to how to resolve this.
Has anyone encountered this before? If so, can you advise on what I can do
By the way I am connecting using IKEv2 (IPsec) as these are the requirements and the AC version is 4.0.00061, ASA version: 9.2(1).
Many thanks
