topic Re: Customizing High Authentication Latency Alarm in Network Access Control

Customizing High Authentication Latency Alarm

paul — Tue, 20 Nov 2018 17:08:37 GMT

I am doing RADIUS MFA for some of my use cases. The RADIUS timeouts when doing MFA are long because you need to allow users to do the MFA. The problem is I am getting high authentication latency false positives because ISE sees the 12 second response time from the MFA server as a problem even though it is completely normal.

I don't know of a way to suppress this alarm for just one external RADIUS server. Is there?

I think my only options are to disable the alarms or increase the max authentication latency for the alarm, both of which aren't appealing.

Re: Customizing High Authentication Latency Alarm

Timothy Abbott — Tue, 20 Nov 2018 17:25:53 GMT

There isn't the ability to suppress the alarm for one server today. Like you stated, the only other options are to modify the alarm or disable it.

Regards,
-Tim

Re: Customizing High Authentication Latency Alarm

paul — Tue, 20 Nov 2018 17:29:27 GMT

Thanks for the quick response Tim. I figured I wasn't missing anything, but thought I would do a double check.

Re: Customizing High Authentication Latency Alarm

bruce.javid — Fri, 20 Sep 2019 06:59:20 GMT

Hi, We are having similar issues with ISE server 2.4 Patch 9

is there any actual fix for it?