https://community.cisco.com/t5/network-access-control/devices-do-not-connect-to-wifi/m-p/3937915#M466287 <P>It looks like authentication is successful and you are NOT matching any rule in the authorization policy.&nbsp; Or you are hitting a rule in the authorization policy that has the result of "Deny Access".&nbsp; Double check your authorization policy rules.</P> Wed, 09 Oct 2019 13:55:59 GMT Colby LeMaire 2019-10-09T13:55:59Z https://community.cisco.com/t5/network-access-control/devices-do-not-connect-to-wifi/m-p/3937626#M466286 <P>Hello,&nbsp;</P><P>&nbsp;</P><P>I have a deployment of ISE for devices who connect to WIFI through MDM.</P><P>The certificates are installed normally but they cannot connect.&nbsp;</P><P>Logs from ISE show "5400 Authentication Failed" followed by</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="clipboard_image_0.png" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/46447i3E12C9D04667279E/image-size/medium?v=v2&amp;px=400" role="button" title="clipboard_image_0.png" alt="clipboard_image_0.png" /></span></P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="clipboard_image_1.png" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/46448iA1E7DBFC0082D35C/image-size/medium?v=v2&amp;px=400" role="button" title="clipboard_image_1.png" alt="clipboard_image_1.png" /></span></P><P>&nbsp;</P><P>As I can see the authentication is successful, and the authorization fails.&nbsp;</P><P>I will check the auth policy.&nbsp;</P><P>&nbsp;</P><P>Do you have any other idea what could l check?</P><P>&nbsp;</P><P>Regards,&nbsp;</P><P>Konstantinos</P> Wed, 09 Oct 2019 06:20:20 GMT https://community.cisco.com/t5/network-access-control/devices-do-not-connect-to-wifi/m-p/3937626#M466286 kostasthedelegate 2019-10-09T06:20:20Z https://community.cisco.com/t5/network-access-control/devices-do-not-connect-to-wifi/m-p/3937915#M466287 <P>It looks like authentication is successful and you are NOT matching any rule in the authorization policy.&nbsp; Or you are hitting a rule in the authorization policy that has the result of "Deny Access".&nbsp; Double check your authorization policy rules.</P> Wed, 09 Oct 2019 13:55:59 GMT https://community.cisco.com/t5/network-access-control/devices-do-not-connect-to-wifi/m-p/3937915#M466287 Colby LeMaire 2019-10-09T13:55:59Z https://community.cisco.com/t5/network-access-control/devices-do-not-connect-to-wifi/m-p/3938754#M466288 Yes, there were hits in the default rule which denied access.<BR /><BR />The problem was that the MDM was disabled for some reason in ISE. When I enabled it worked.<BR />Thanks and regards,<BR />Konstantinos Thu, 10 Oct 2019 12:31:49 GMT https://community.cisco.com/t5/network-access-control/devices-do-not-connect-to-wifi/m-p/3938754#M466288 kostasthedelegate 2019-10-10T12:31:49Z