topic ISE 2.3 - Temporal agent issue in Network Access Control

ISE 2.3 - Temporal agent issue

dhanushka_ — Thu, 09 Aug 2018 14:13:47 GMT

We are working with ISE 2.3 and Posture to guest clients using cisco temporal agent, but when we download and run the temporal agent we got the following error "Failed to contact policy server"

Does anybody know how to resolve this issue ?

Thanks

Re: ISE 2.3 - Temporal agent issue

Nidhi — Fri, 10 Aug 2018 05:40:26 GMT

make sure you have appropriate dACL configured for the PSNs to be discovered. you can go through this link - Link

Also please work with TAC to troubleshoot this issue further.

Thanks,

Nidhi

Re: ISE 2.3 - Temporal agent issue

dhanushka_ — Mon, 13 Aug 2018 04:13:42 GMT

HI Nidhi,

Thanks for your reply.

Re: ISE 2.3 - Temporal agent issue

dhanushka_ — Mon, 13 Aug 2018 04:52:37 GMT

I have able to found a solution for this issue.

This Failed to contact policy server error got because of the DNS error. If temporal agent could not able to resolve FQDN as defined for G0 on ISE primary server this error occurred.

FQDN (“hostname” and “ip domain-name”) of the ISE admin server itself must be added as a DNS entry.

Re: ISE 2.3 - Temporal agent issue

Jason Kunst — Tue, 14 Aug 2018 11:48:19 GMT

Great! Yes all your ISE Nodes should be resolvable via DNS forward and reverse lookups for proper functionality