10-17-2014 03:35 AM - edited 02-21-2020 07:53 PM
Hi Team,
While I am unable to connect cisco anyconnect vpn.
"posture assessment failed.Hostscan CSD prelogin verification failed"
Please let us know how to fix the issue.
Thanks
Naga
10-27-2014 12:48 PM
Make sure your Host scan version matches the Anyconnect version (or use the anyconnect image for hostscan also).
10-31-2014 01:58 PM
Hi,
It seems you have prelogin polices defined on the ASA whose check the end client is failing.
Please check those settings.
http://www.cisco.com/c/en/us/td/docs/security/csd/csd34/configuration/guide/csd34cfg/CSDpretu.html
This document will provided the link to implement it in your case reverse engineer it.
You can also obtain Cscan logs from the end client machine and see where it is failing.
Path on windows 7
C:\Users\username\AppData\Local\Cisco\Cisco HostScan\log
01-15-2016 08:38 AM
I have the same issue, but may have extenuating circumstances:
I have a Lenovo Laptop running LINUX with a Windows 7 KVM running inside it.
I connect to a customers system and until about 3 months ago it was working just fine, no issues at all, but then the customer upgrade their AnyConnect software and ever since then I am getting the error "Posture Assessment Failed: Hostscan CSD prelogin verification failed."
The customer says the rules require a valid OS (Windows 7 is valid the customer says), that the system must be running a valid Anti-Virus (I am running Symantec, and it is up to date, which the customer says), and you must be running a firewall (I am, it is being managed by the Symantec Antivirus, and that too is valid according to the customer).
What I do not understand, is that no-one seems to be able to tell me what is failing.
Also in an above comment about where the log for this is, I do not see even the path that is mentioned (You can also obtain Cscan logs from the end client machine and see where it is failing. Path on windows 7 C:\Users\username\AppData\Local\Cisco\Cisco HostScan\log)
I am not sure how much of this is due to the LINUX/WINDOWS 7 KVM but I really need some help solving this issue.
09-19-2016 08:00 AM
After trying numerous suggested options, A complete Uninstall of Cisco Anyconnect and re-install as described below worked for me.
Uninstallation
09-19-2016 08:34 AM
So one of the things that happens in posture assessment is that the a bunch of data gets passed between the client and firewall... I tried bumping that limit and it fixed it for a while...
Turns out the user was using Fiddler which left many certificates in the Personal cert store... once that was cleaned up, the issue dissappeared.
09-06-2017 07:28 AM
I have this same problem. My cisco anytime worked fine at home for a few days and now I'm getting the error
Posture Assessment Failed: Hostscan CSD prelogin verification failed.
Does anyone have a tried and true way to fix this. I saw where a reinstall of Cisco Anytime might be required?
Thanks
03-26-2020 12:03 AM - edited 03-26-2020 12:04 AM
After uninstalling as suggested by @sgoundla, I installed an old version of AnyConnect and then made sure I'm updated with the version of AnyConnect that the particular VPN server pushes out. If the automatic update doesn't work, it'll at least tell you which version no. it tried to install so you can obtain that and install it manually. That was the way I got mine working again.
So this error may pop up if the client version is newer than the server version.
07-18-2022 06:55 AM
This solved the issue for me:
https://www.reddit.com/r/Cisco/comments/imsmn2/helping_the_next_guygal/
Basically restarting the "Internet Connection Sharing (ICS) " service fixed it. Shutting down the computer and powering it back up did not resolve the issue, but restarting this service after computer came up did the trick.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide