subfere.blogg.se

!!- Now there is a caveat to this config, using a FQDN statement will only work if the ACL is applied to an interface. Configure an object in your ASA with a fqdn for object network obj-fqdn - Add a deny statement in your ISE_REDIRECT ACL, tune the ACL to your needs:Īccess-list ISE_REDIRECT extended deny icmp any anyĪccess-list ISE_REDIRECT extended deny ip any host obj-ISE-PSN-01Īccess-list ISE_REDIRECT extended deny ip any host obj-ISE-PSN-02Īccess-list ISE_REDIRECT extended deny ip any host obj-ISE-PSN-03Īccess-list ISE_REDIRECT extended deny ip any object obj-access-list ISE_REDIRECT extended permit tcp any any eq www Name-server 10.0.0.11 ! Use an internal trusted DNS server Name-server 10.0.0.10 ! Use an internal trusted DNS server

Configure your ASA's DNS Lookup settings:ĭns domain-lookup INSIDE ! Define the internal interface to send dns lookup queries to (From: Mike Gatti) Here is the workaround I created to address this issue, hopefully it can help anyone else experiencing the same problem. Suggestion to troubleshoot this issue is highly appreciated. Is this a known issue or auto pop-up can be suppressed with Anyconnect or endpoint configuration.ĭescription : Function: HttpConnection::MakeRequest System scan with anyconnect starts and user is not triggering any http session to make Edge browser auto pop-up to get redirected to client provisioning portal. User connects over over VPN and authentication of user credential is successful. We observe that during posture redirection / system scan, Edge browser automatically popping up "Client Provisioning Portal" without any user intervention.