Untrusted Server Blocked

[lilianamartinez]

Hi, 

When I connect to VPN by VPN client I got Untrusted Server Blocked on Anyconnect refering to ISE in wich we have posture configured. How it is related ?  

VPN is configured by ASA wich doesn't have any relationship with ISE, why I got this error , also this error just displays on some users, not all.

Regards

[Javier Acuña]

Thank you for communicating with the Cisco community, validate the VPN pool in the ASA and verify which server is authenticating, in many cases it is authenticated from the ISE (Most recommended)

in the same way could you please leave a picture of the error

[Hilda Arteaga]

thanks for the kind assistance @Javier Acuña 

[Mohammed al Baqari]

Hi,

It seems that you have ISE Posture agent installed on your clients. When
VPN connection is established, this is a change in network adapter which
triggers posture check. Its able to find the Policy Server (ISE Posture
node) but the certificate is rejected. Hence you are getting a certificate
error. Check your posture configuration, the policy server should be same
as ISE FQDN configured in ISE.

**** please remember to rate useful posts