Hi,
We have a customer running ISE 2.4 with patch 5. They have Symantec endpoint protection 14.x. The customer has a local update server which is providing AV updates ( the clients are not directly getting the av updates from internet) . I have configured posture policy to check if any machine is running AV signature older than 14 days with auto-remediation ( Anti-Malware). But the clients are always getting the error "The remediation you are attempting is reporting an access denied error. This is usually due to privilege issues. Please contact your system administrator".
How does Anyconnect agent trigger for an update if it finds that the signature is outdated?. Will it ask the Symantec client to communicate with the update server?.
Kindly help me to solve the issue.
Thanks
