Mac OS laptops with Cisco Anyconnect Posture

[Kamran Mustafayev]

Hello,

Im observing an issue with our MacOS clients when using an anyconnect cisco client to go through the posture check process

All my users including windows and mac os machines are going through that ISE posture check, initially when user connected it getting an IP address from the Quarantine subnet with limited access, ISE posture checks if client has specific programs installed and if yes, device ends up in compliant state and gets an IP from the production network

I don’t see problems on Windows devices, but I see them on Mac OS, sometimes MacOS users ends up ij compliant state but stuck in quarantine subnets, users has to go through this process multiple times in order to get correct IP

anyone faced such problem? Let me know what details you might need,

thank you

[marce1000]

 - Start by examine  the ISE Live Logs for the involved posture checks (and authentications) : try to determine where it gets stuck or goes wrong for a MacOS client . Also compare the posture trail followed by the client from a working Windows device (e.g.) :

  https://www.youtube.com/watch?v=wzP6N-9fjSE

 M.