topic Re: View Blacklisted Endpoints by Client Suppression Feature in Network Access Control

View Blacklisted Endpoints by Client Suppression Feature

umahar — Tue, 24 Jul 2018 20:20:38 GMT

We have enabled anomalous client suppression with Reject RADIUS requests from clients with repeated failures checked.

Is it possible to view the blacklisted endpoints on ISE due to repeated client failures ?

Re: View Blacklisted Endpoints by Client Suppression Feature

Craig Hyps — Tue, 24 Jul 2018 21:50:58 GMT

On the ISE Home Page, you will see a counter for "Rejected Endpoints". You can click on this to bring up list, or view Rejected endpoints in Context Visibility and have option to choose all or specific endpoints and "Release Rejected".

Re: View Blacklisted Endpoints by Client Suppression Feature

umahar — Wed, 25 Jul 2018 14:29:15 GMT

Thanks Craig

Which ISE versions are these features supported from ?

Also the API support where we can release rejected endpoints

Re: View Blacklisted Endpoints by Client Suppression Feature

Craig Hyps — Wed, 25 Jul 2018 15:17:22 GMT

In ISE 2.2 we display and allow release of suppression-Rejected Endpoints. API also added in 2.2. See BRKSEC-3699 (reference version) from CiscoLive Orlando 2018 (available on CiscoLive.com) for more info with screen shots. Search on "Visibility into Rejected Endpoints"

Example ERS API: