Guest

Preview Tool

Cisco Bug: CSCut47995 - Anyconnect 4.0 ISE posture module not discover on Inclusive Split Tunnel

Last Modified

Mar 01, 2018

Products (1)

  • Cisco AnyConnect Secure Mobility Client

Known Affected Releases

4.0(61)

Description (partial)

Symptom:
Anyconnect 4.0 and ISE posture module states  "System scan not required on current Wi-Fi"

Client never goes compliant and is shown in ISE as posture pending

Posture client never starts discovery process

Conditions:
ISE 1.3

ASA with split tunnel VPN - Inclusive

AC 4.0 client with ISE posture module

Connecting over non dot1x enabled wireless

Related Community Discussions

Anyconnect 4 - ISE System Scan on WiFi
Hi folks, We're currently in the process of rolling out Anyconnect 4 with NAM and ISE agents to handle our 802.1x requirements. As part of this we're also interoperating with Anyconnect VPN on 5585-x firewalls to take advantage of the CoA on this platform.   Everything seems to be working really well, which is great, except for one thing.  We have two VPN Profiles - one which tunnels all traffic and one which split-tunnels corporate ranges (all RFC 1918) allowing other-stuff directly out to the internet. ...
Latest activity: Apr 10, 2015
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.