topic Re: Windows 10 and ISE 2.1.0.474 in Network Access Control

Windows 10 and ISE 2.1.0.474

__Beth__ — Thu, 30 Jun 2016 19:07:35 GMT

Hello,

I was wondering if anyone has seen issues with Windows 10 and ISE 2.1.0.474. We just upgraded ISE Tuesday night and are starting to roll out Windows 10 and am finding those devices cannot connect to wireless. The error is:

12309 PEAP handshake failed

I found an article that indicates Windows 10 and an older version of ISE had issues:

https://support.microsoft.com/en-us/kb/3121002

If any more information is needed, please let me know.

Any comments or advice would be appreciated.

Thanks,

Beth

Re: Windows 10 and ISE 2.1.0.474

__Beth__ — Thu, 30 Jun 2016 20:16:49 GMT

More info:

OpenSSLErrorMessage SSL alert: code=0x228=552 ; source=local ; type=fatal ; message="handshake failure"

OpenSSLErrorStack 139992965986048:error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher:s3_srvr.c:1443:

Re: Windows 10 and ISE 2.1.0.474

hslai — Thu, 30 Jun 2016 20:28:22 GMT

Please engage TAC on this. Why would Windows 10 attempt SSL3_GET_CLIENT_HELLO? Is registry modified on the Windows 10 to enforce older SSL/TLS protocols? Is this not Windows 10 version 1511?

Note that our product and support teams do not support any pre-release or insider builds but I am not aware of any issue in PEAP auth with ISE 2.1.

Re: Windows 10 and ISE 2.1.0.474

__Beth__ — Thu, 30 Jun 2016 21:16:27 GMT

Thank you. It is build 1511. I have opened a ticket with TAC. I will try to update this with the solution.

Re: Windows 10 and ISE 2.1.0.474

__Beth__ — Thu, 07 Jul 2016 16:58:06 GMT

It looks like the patch for this problem regressed in 2.1. The engineer I am working with is contacting the developers. In the meantime, this link provides a work around.

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuw88770

Re: Windows 10 and ISE 2.1.0.474

Ryan.Go — Wed, 09 Nov 2016 07:26:05 GMT

Thanks for the link and workaround.

Is there any update on your TAC or has this issue been solved by a new release?

Re: Windows 10 and ISE 2.1.0.474

__Beth__ — Wed, 09 Nov 2016 14:01:42 GMT

We had so many issues with this release, we ended up rolling back. I need to revisit this at some point...