topic Viewing the attributes which send to Cisco ISE in Network Access Control

Viewing the attributes which send to Cisco ISE

Marco Serato — Mon, 11 Mar 2019 03:51:07 GMT

Hey

Is there a way to view in the attributes (AD group, certificate name) which are transmitted to the Cisco ISE? I want to check which attribute does not match for a host.

Marco

Viewing the attributes which send to Cisco ISE

Anas Naqvi — Tue, 03 Sep 2013 15:58:33 GMT

Hello Marco,

You can run the reports on endpoint profiling from the following location:

Operations > Reports > Catalog > Endpoint.

The following are the standard reports for endpoint profiling:

•Endpoint_MAC_Authentication_Summary—A report that lets you view the RADIUS authentication summary information for a particular MAC/MAB along with a graphical representation for a selected time period.

•Endpoint_Profiler_Summary—A report that lets you view the profiler summary information for a particular MAC address for a selected time period.

•Endpoint_Time_To_Profile—A report that lets you view the time to profile information for a particular MAC address for a selected time period.

•Top_N_Authentications_By_Endpoint_Calling_Station_ID—A report that lets you view the top N passed/failed/total authentications count for RADIUS protocol with respect to an endpoint calling station ID for a selected time period.

•Top_N_Authentications_By_Machine—A report that lets you view the top N passed/failed/total authentications count for RADIUS protocol with respect to machine information for a selected time period.

Also check the following links for reference,

http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_prof_pol.html#wp1340624

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_mnt.html

Viewing the attributes which send to Cisco ISE

Marco Serato — Wed, 04 Sep 2013 09:53:15 GMT

Thanks for answer.

Viewing the attributes which send to Cisco ISE

aqjaved — Wed, 04 Sep 2013 14:33:00 GMT

The RADIUS_Accounting report has enhanced options to run the report for intervals of less than an hour. The Run button provides a list of short intervals starting with a minimum of a minute. This allows you to view accounting records at short intervals that are less than an hour so that you can view a fewer number of records depending on the interval.

You can choose the Query and Run option to run the RADIUS_Accounting report for every minute past and thereafter at other intervals including the past 5 minutes, 15 minutes, 30 minutes, one hour and so on. When you choose to run the report by using the Query and Run option from the Run button, you can view the RADIUS_Accounting > Query and Run page. This page displays the Time Range field, where you can choose intervals in minutes for time ranges that are less than an hour.

For More Information, please visit the:

http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_prof_pol.html#wp1401335