topic Thanks Rahul. in Network Access Control

Cisco ISE Endpoint Purge -license needed- ?

alois.heilmaier — Mon, 11 Mar 2019 07:48:19 GMT

I have some Licensing issues with Cisco ISE (Base license).

With Base License I will be able to provide Guest/TrustSec/AAA/Radius dot1x.

1.) On my Cisco ISE I need to purge Endpoints immediately.

But unfortunately I get an error:

"HTTP Status 401 - One or more licenses are Out of Compliance for more than XX days, corresponding service configuration will be disabled"

2.) Edit or Change the Purge Policy is also not working. Maybe due to License Problem.

Is there really more than a Base License needed for such simple things ?

What version of ISE are you

Marvin Rhoads — Thu, 22 Jun 2017 16:09:08 GMT

What version of ISE are you using?

2.2 had a bug with this feature that incorrectly looked for a license beyond base (e..g Plus or Apex). I believe 2.2 patch 1 fixed it.

Marvin is correct. Bug

Rahul Govindan — Thu, 22 Jun 2017 16:17:24 GMT

Marvin is correct. Bug details:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvd01079/?referring_site=bugquickviewclick

Thanks Rahul.

Marvin Rhoads — Thu, 22 Jun 2017 16:24:18 GMT

Thanks Rahul.

They haven't updated the BugID but the 2.2 Release notes confirm it is fixed in Patch 1:

http://www.cisco.com/c/en/us/td/docs/security/ise/2-2/release_notes/ise22_rn.html#pgfId-746713

Thanks Marvin, Thanks Rahul,

alois.heilmaier — Fri, 23 Jun 2017 09:01:46 GMT

Thanks Marvin, Thanks Rahul,

Bug describes exactly my problem.

Unfortunately I do have Version 2.2.0.470 Patch1(until now the newest). Problem still exists.

There are more Problems with base license. e.g.

- I also use the myDevice Portal to register Mac-Adresses. This Portal can't be changed anymore.

- Disable Device Profiling. Same Problem.

Since you have the patch

Marvin Rhoads — Fri, 23 Jun 2017 12:25:36 GMT

Since you have the patch documented to fix the bug and yet are still seeing the symptoms, please open a TAC case.

They can work with you to best ascertain if it is a new bug or if the fix for old one wasn't properly regression tested (or if it's something else altogether).