topic ISE 2.2 Automatically Block all the users in Network Access Control

ISE 2.2 Automatically Block all the users

gullmkhan999 — Tue, 08 Aug 2017 06:28:29 GMT

Dear All,

we have ISE 2.2 in our network and network devices are integrated to it, we can login through ISE user in our devices, the issue which i faced with ISE that is it automatically block all the users, every morning we have to enable the user and gain access to the devices via ISE. i searched alot but didnt find any solution thats why i am posting it here. it would be appreciated to have your comments regarding this issue

Re: ISE 2.2 Automatically Block all the users

hslai — Tue, 08 Aug 2017 18:02:09 GMT

Assuming you are using ISE internal users, please take a look at ISE internal user for TACACS+ status monitoring and Account Disable Policy

Re: ISE 2.2 Automatically Block all the users

gullmkhan999 — Wed, 09 Aug 2017 04:03:43 GMT

Thanks For your kind reply.

Yes the users are local user through which we can login into our devices, and as you stated to check the account disabled policy, from administration tab in setting, user authentication, password lifetime, Disable user account after 60 days, this option is unchecked and account disabled policy that is also uncheck. the issue which i have posted here it is different you suggested. ISE blocking all the Local users everyday and we have to enable it at every morning, there is no policy configured to block or account expiration policy. all the options are disabled. Please Help!!!!

Re: ISE 2.2 Automatically Block all the users

Jason Kunst — Wed, 09 Aug 2017 16:33:13 GMT

Please open a tac case

Re: ISE 2.2 Automatically Block all the users

hslai — Sat, 12 Aug 2017 02:31:54 GMT

I hope you have followed Jason's suggestion. TAC can help gathering debugging info and troublehsoot it for you.

If all the users were created before un-selecting the options, please create new users and check.