User Authentication Failed but Machine succeeded cisco ISE 2.7

Tutu — Wed, 24 Mar 2021 17:48:08 GMT

Hello All,

Today after a month of using ISE my users were not able to authenticate but machine authentication succeeded.

Please help.

This is the error i got from the live logs

Issued PAC type=Machine Authorization with expiration time: Wed Mar 24 20:12:17 2021

Can someone tell me what this means ?

Re: User Authentication Failed but Machine succeeded cisco ISE 2.7

ppreenja — Fri, 26 Mar 2021 04:52:52 GMT

Hello Tutu,

It seems that authorization conditions are not matching as expected.

You might be using host/machine-name as a condition which won't work when authenticating with certificates.

It is expected for EAP-TLS to have the username as host/anonymous since the identity is not yet protected.

I would suggest using the certificate attributes instead and hopefully, that should resolve the issue.

If you are still facing the issue, I would request you to post in the below community channel:

Cheers,

Pratham