01-20-2022 02:27 AM
Hi
We have access to two VPN servers, One for client network access and another for work.
Apparently, one server runs on 4.10 and the other on 4.9.
When i am connecting to client VPN, AnyConnect VPN gets upgraded to 4.10 and when connecting to work vpn, Anyconnect gets downgraded to 4.9.
We have ISE with posture check for work VPN.
I want to make sure that any users having 4.10 VPN can also connect to work VPN without downgrading to 4.9
Please help how i can implement the same.
01-20-2022 03:02 AM - edited 01-20-2022 03:03 AM
When i am connecting to client VPN, AnyConnect VPN gets upgraded to 4.10 and when connecting to work vpn, Anyconnect gets downgraded to 4.9.
what is the difference here client VPN and Work VPN, they both different Remote access solution then, make sure both have same version of any connect version that is 4.10 if that is what you looking ?
Also check ISE Posture policy expect to be Any connection 4.9 or 4.10 ?
01-20-2022 03:19 AM
rashish135@yahoo.co.in I'm not aware you can automatically downgrade, do you possibly have a software management solution such as SCCM that could be re-installing v4.9? I'd recommend migrating to v4.10 anyway as 4.9 is no longer available for download, so 4.10 would have to be considered the recommended version.
01-20-2022 05:13 AM
AnyConnect does not support downgrading from the ASA or ISE Server. Something else must be going on as Rob suggested. Eitherway you should upgrade both headends to 4.10.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide