u/Akrisz11

Problem Description:
We are experiencing inconsistent Posture compliance behavior when endpoints switch between different network interface cards (NICs).

  1. State Flapping on Adapter Switch: When a laptop gains a "Compliant" status on the LAN adapter and then switches to Wi-Fi (or vice versa), it occasionally becomes "Non-Compliant" on the new interface.

2. Correlation with Posture Lease Expiry: The issue occurs once a day, coinciding with the expiration of the 24-hour Posture lease. We have observed a pattern where the transition works correctly for an entire day, but then fails daily for several consecutive days once the lease expires.

  1. Scan Again Failure: Particularly on Wi-Fi, the endpoint often gets stuck in a "Non-Compliant" state. Clicking "Scan Again" in the Cisco Secure Client does not trigger a re-assessment or resolve the issue. Only a full network disconnection and reconnection (Re-connect) forces a successful posture flow to reach a "Compliant" state.

Has anyone encountered this issue? Is there a known workaround or solution?

reddit.com
u/Akrisz11 — 9 days ago