topic ISE 1.1.1 High CPU usage in Network Access Control

ISE 1.1.1 High CPU usage

martyn.rees — Mon, 11 Mar 2019 02:26:00 GMT

Has anyone had any problems with high CPU usage when ISE is under very minimal load, especially in the middle of the night?

At the moment there are max 10 wireless clients connected at any one time, but none overnight, yet the CPU sits around 90% all of the time.

The ISE in question is a VM, and has 4GB RAM, and 2 CPU's allocated. It is a stand alone system, and is only being used for wireless auth.

I haven't been able to find much in the way of being able to track which process is consuming CPU time, so it's hard to know exactly what is the cause, and where to look to resolve.

ISE 1.1.1 High CPU usage

Tarik Admani — Thu, 16 Aug 2012 15:30:06 GMT

Do you have the automatic updates configured for the client provisioning setting? Try disabling the automatic updates:

http://www.cisco.com/en/US/docs/security/ise/1.1.1/user_guide/ise_client_prov.html#wpxref43943

Thanks,

Tarik Admani
*Please rate helpful posts*

ISE 1.1.1 High CPU usage

martyn.rees — Fri, 17 Aug 2012 00:59:40 GMT

Automatic updates for the client provisioning is disabled, as is posture updates.

ISE 1.1.1 High CPU usage

Tarik Admani — Fri, 17 Aug 2012 02:45:11 GMT

Do you have all the probes turned on? Can you disable any unused probes if they are enabled. I can try looking at a support bundle for you or you can have tac do this.

Thanks,

Tarik Admani

ISE 1.1.1 High CPU usage

martyn.rees — Fri, 17 Aug 2012 02:49:12 GMT

There are only three probes enabled at the moment, RADIUS, NMAP, and DNS.

ISE 1.1.1 High CPU usage

Tarik Admani — Fri, 17 Aug 2012 05:59:01 GMT

I am curious to see if the nmap probe is causing this issue, can you see if disabling this will bring the cpu utilization down? If it does or doesnt I would suggest opening a tac case, they should be able to look into your virtual machine a little deeper.

Thanks,

Tarik Admani
*Please rate helpful posts*

ISE 1.1.1 High CPU usage

gschmitt.ngit — Sun, 30 Sep 2012 17:01:36 GMT

Have you installed patch 2? One of the reasons for the issue of this patch was to address this issue and data base replication.

Cheers

ISE 1.1.1 High CPU usage

martyn.rees — Tue, 02 Oct 2012 00:09:37 GMT

Yep Patch 2 has been applied, but didn't have any effect on the issue. Also as I mentioned in the original post this is a stand alone system, so there wouldn't be any replication to other members.

Re:ISE 1.1.1 High CPU usage

Tarik Admani — Tue, 02 Oct 2012 00:24:03 GMT

Is this a virtual machine if so is this local or san storage?

Sent from Cisco Technical Support Android App

Re:ISE 1.1.1 High CPU usage

martyn.rees — Tue, 02 Oct 2012 00:25:27 GMT

Yes it is a VM, and it is running on SAN storage, as the VM host is a blade server.

Re:ISE 1.1.1 High CPU usage

Tarik Admani — Tue, 02 Oct 2012 00:28:44 GMT

Blade storage is that iscsi? Was it originally provisioned for 60gb and the remaining provisioned after?

Sent from Cisco Technical Support Android App

Re:ISE 1.1.1 High CPU usage

martyn.rees — Tue, 02 Oct 2012 00:30:04 GMT

It is a fibre channel SAN connectivity, and was provisioned from the start with 400GB storage.

cheers

Re:ISE 1.1.1 High CPU usage

Tarik Admani — Tue, 02 Oct 2012 00:34:14 GMT

Your best bet is to open a tac case to have them take a look. Also you might want to try to rebuild the virtual machine from scratch and monitor again.

Thanks.

Sent from Cisco Technical Support Android App

Re:ISE 1.1.1 High CPU usage

martyn.rees — Tue, 02 Oct 2012 00:36:20 GMT

Yep have got a TAC case under way, but it is slow to work through. At the moment it looks like the profiler service is the cause, but it is yet to be confirmed.

cheers

ISE 1.1.1 High CPU usage

andypenning — Wed, 03 Oct 2012 02:05:38 GMT

Martyn, if you get a resolution please let us know. I'm having a similar issue. thanks!

ISE 1.1.1 High CPU usage

martyn.rees — Wed, 03 Oct 2012 03:23:48 GMT

No worries, will do. Have you raised a TAC case?

ISE 1.1.1 High CPU usage

andypenning — Wed, 03 Oct 2012 03:27:30 GMT

Thank you. No, not yet haven't had the time and its not a production system.