Question

A network administrator has enabled posture services in ISE. Windows corporate laptops connecting via wired 802.1X are being redirected to the Client Provisioning Portal, but instead of receiving the Cisco Secure Client agent, users see a message that no client provisioning policy matched. AnyConnect/Secure Client configurations and agent resources have already been uploaded. What is the MOST likely reason the client provisioning policy is not matching?

Accepted Answer

The client provisioning policy rule conditions (operating system, and/or identity group) do not match the connecting Windows endpoints

Answer

The posture remediation timer has expired before the agent could be delivered

Answer

The compliance module version is newer than the posture agent version

Answer

The endpoint is running in stealth mode, which suppresses the provisioning portal