topic Re: PassiveID Agent deployment and Windows Server 2016 in Network Access Control

PassiveID Agent deployment and Windows Server 2016

vfranjic — Tue, 03 Sep 2019 14:34:29 GMT

Dear all,

we have problem with getting sessions from PassiveID. Customer has ISE and DC agent installed onto Windows server 2016. Agent couldnt sync back to ISE. Red dot is indicating status in PassiveID dashboard and 0 sessions were received. There is no traffic filtering between DC and ISE subnet.

Also we looked into log from agent and got this:

ERROR - Rest Client, Error getting configuration from https://xxx.xxx.xxx:9095 : The underlying connection was closed: An unexpected error occurred on a receive.
ERROR - Configuration , Recieved empty config

On TCP dump we see server sending FIN right after 3-way handshake is established with ISE.

Did someone encountered this kind of error?

Regards,

Vedran.

Re: PassiveID Agent deployment and Windows Server 2016

dporod — Wed, 18 Sep 2019 16:35:35 GMT

I have this issue also, have you found a resolution?

Re: PassiveID Agent deployment and Windows Server 2016

vfranjic — Wed, 18 Sep 2019 16:40:38 GMT

Hi,

no I haven't. We switched to WMI and also have problems. Here is thread that I opened and currently looking into this>

https://community.cisco.com/t5/identity-services-engine-ise/ise-passiveid-and-wmi-pulling/m-p/3926423#M30425

Regrads,

Vedran.