Cisco AnyConnect - A unified security endpoint agent that delivers multiple security services to protect the enterprise. Zscaler - Secure, simplify and transform IT with cloud security platform. AT&T VPN is most compared with Cisco AnyConnect Secure Mobility Client and Prisma Access by Palo Alto Networks, whereas Zscaler Private Access is most compared with Prisma Access by Palo Alto Networks, Cisco AnyConnect Secure Mobility Client, Okta Workforce Identity, Cloudflare Access and F5 BIG-IP. See our list of.
Hello! We are currently deploying Zscaler App to customer and having compatibility issue with Cisco AnyConnect Secure Mobility Client. The agent is only for Network access control.
We found that the issue happen when user switch from wired network to wireless network. Both network are also connected to the same corporate network internally. When user switch network, the Cisco AnyConnect Secure Mobility Client will act as NAC solution and check for 3 things before allow the user connect to internal corporate network:
- Check if the PC is domain-joined
- Check the Antivirus is installed
- Check the Virus signature is up-to-date
After all checking are compliant, user will be allowed to access the internal corporate network.
Zscaler Cisco Anyconnect Windows 10
After installed Zscaler App, we found on Zscaler App that when switch between network, the ZApp will show message that indicate not able to reach internet. This is normal since Cisco agent need to complete the checking before allow the network. However after the Cisco agent completed the checking and show compliant, the ZApp still showing the same error message. We observed the symptom on the affected PC as below:
Zscaler Vs Cisco Anyconnect
- Not able to access any internal website
- Not able to access internet
- not able to resolve DNS with internal DNS server
The issue remain the same when we try to restart the checking on Cisco agent.
The issue is Intermittent and it does NOT happen every time when switch between network.
It could only be resumed when user restart the PC.
May I know if there is any previous experience sharing that install Zscaler App to Cisco ISE agent environment, or any other NAC solution?