Symptom

AnyConnect VPN Client disconnects upon successful posture assessment. Over ISE is seen that instead of sending a CoA push=true with the right attributes ISE is sending CoA Disconnect

Conditions

[+] ISE 3.2p3 [+] Posture VPN flow [+] ISE configured for Posture Assessment with AnyConnect or Secure Cilent [+] Having RADIUS Session Directory (RSD) disabled

Workaround

1) Go to Administration > System > Settings > Light Data Distribution 2) Enable the checkbox for RADIUS Session Directory

Further Problem Description