AnyConnect VPN Pop up Message after applying the host scan policy

[neerajbala2005]

I have Virtual ASA and recently applied the host scan policy. After applying the host scan policy for our Cisco AnyConnect VPN users, Each and every user whenever gets authenticated and logs in via the AnyConnect client, they receive the following message post login:

Security policies were applied to your session, access to some resources may be blocked. Your system administrator provided the following information to help you understand and remedy the security conditions:

I have tried to uncheck the following but no luck

1. "Banner" inherit message under group policy (Configuration > Remote Access VPN > Network (Client) Access > Group Policies) 2.  Cleared the " User Message" under DAP ( Remote Access VPN>Network (Client) Access>Dynamic Access Policies

Please advise

[Pavan Gundu]

What are your DAP policies? And what is configured in the default rule? Allow or Deny?

[neerajbala2005]

default rule is allow

[Pavan Gundu]

Then it is working as expected, since the default DAP says to continue.

Your other DAP records are not working as expected. Normally the default DAP record has block.

You can issue the debug command "debug dap trace 255" to see what attributes the endpoint is sending and what DAP record the ASA is choosing based on the records.