topic Re: ISE questions for access in Network Access Control

ISE questions for access

MikeAoD — Wed, 16 May 2018 19:17:07 GMT

It is possible to have access to the internal log storage of ISE? Or there's any way to access to the underlying linux after installation to gain some access?

Re: ISE questions for access

kvenkata1 — Wed, 16 May 2018 20:43:46 GMT

Hi Miguel,

What are you looking for? All available troubleshooting commands/logs are documented here & hopefully you'll find what you need.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_011…

Re: ISE questions for access

MikeAoD — Wed, 16 May 2018 20:55:06 GMT

Hi Krishnamurthy

Hoping you're doing well, one customer is requesting if there's any way we can access to the underlying system to extract information of the logs or to reconfigure the system. I already answered the that this is not possible due the security in ISE but they wanted me to escalate this topic for a review.

Regards,

Enviado desde mi Samsung Mobile de Telcel

Re: ISE questions for access

Jason Kunst — Wed, 16 May 2018 21:04:06 GMT

There a basic commands that we give access to look at the logs another minimally operational tasks. Can you provide more specifics on what they are looking to do.

Sent from my iPhone

Re: ISE questions for access

MikeAoD — Wed, 11 Nov 2020 21:47:22 GMT

Yes, they want to get Access to extract all the log information, actually they were asking for the folder where the logs are stored in the ISE.

Best Regards,

Re: ISE questions for access

Arne Bier — Thu, 17 May 2018 00:17:18 GMT

On each ISE node you can get a lot of raw log information. There is Linux level logs (aka "system" logs) and ISE application logs

e.g.

sco8834ise054/admin# show logging ?

> Output Redirection.

application List application log files

container Show container logging information

internal Show syslog configuration internal

system List system log files

| Output modifiers.

<cr> Carriage return.

e.g. show logging system maillog

will display contents of the Linux /var/log/maillog

Re: ISE questions for access

Jason Kunst — Thu, 17 May 2018 00:26:12 GMT

You can also download the logs via the admin UI, this is available in the admin guide

Sent from my iPhone