topic Re: How to disable "Wifi Setup Helper" logs to be sent to Syslog server in Cisco ISE in Network Access Control

How to disable "Wifi Setup Helper" logs to be sent to Syslog server in Cisco ISE

techie21 — Thu, 06 Dec 2018 21:43:40 GMT

Just migrated from ACS to ISE 2.4. Have identical log categories selected in Cisco ISE as had in Cisco ACS. Getting "Wifi Setup Helper" logs in Syslog server that we do not want. I can't find the log category to disable this log.

Re: How to disable "Wifi Setup Helper" logs to be sent to Syslog server in Cisco ISE

Surendra — Thu, 06 Dec 2018 21:47:35 GMT

That is part of the system processes and you cannot avoid it. Whatever you see from the command "show application status ise" will be sent to the syslog servers as well as part of process health check syslog.

Re: How to disable "Wifi Setup Helper" logs to be sent to Syslog server in Cisco ISE

techie21 — Thu, 06 Dec 2018 21:54:19 GMT

Thank you

Re: How to disable "Wifi Setup Helper" logs to be sent to Syslog server in Cisco ISE

Arne Bier — Thu, 06 Dec 2018 23:01:04 GMT

Hi @Surendra

Do you know whether the WiFi Setup feature can be disabled permanently (i.e. survives a reboot)?

It can be disabled in the CLI of the PAN node ... but my memory tells me that when I tried this in previous versions, it didn't survive a reboot.

ise01/admin# application configure ise

Selection configuration option
[1]Reset M&T Session Database
[2]Rebuild M&T Unusable Indexes
[3]Purge M&T Operational Data
[4]Reset M&T Database
[5]Refresh Database Statistics
[6]Display Profiler Statistics
[7]Export Internal CA Store
[8]Import Internal CA Store
[9]Create Missing Config Indexes
[10]Create Missing M&T Indexes
[11]Enable/Disable ACS Migration
[12]Generate Daily KPM Stats
[13]Generate KPM Stats for last 8 Weeks
[14]Enable/Disable Counter Attribute Collection
[15]View Admin Users
[16]Get all Endpoints
[17]Enable/Disable Wifi Setup
[18]Reset Config Wifi Setup
[19]Establish Trust with controller
[20]Reset Context Visibility
[21]Synchronize Context Visibility With Database
[22]Generate Heap Dump
[23]Generate Thread Dump
[24]Force Backup Cancellation
[0]Exit

Re: How to disable "Wifi Setup Helper" logs to be sent to Syslog server in Cisco ISE

Jason Kunst — Fri, 07 Dec 2018 03:02:29 GMT

Did you see this?

https://community.cisco.com/t5/security-documents/cisco-ise-secure-access-wizard-saw-guest-byod-and-secure-access/ta-p/3636602

Startup process behavior per release

2.2 and patch 1 - started by default

2.2 patch 2 - service disabled user directed via UI to enable in the CLI

2.3/2.4 - service disabled user directed via UI to enable via UI or CLI

Re: How to disable "Wifi Setup Helper" logs to be sent to Syslog server in Cisco ISE

techie21 — Fri, 07 Dec 2018 16:18:48 GMT

You are right, it does not survive the reboot. And even if it is disabled, logs still being sent to syslog server.