topic cisco ise 2.4 Administrator authentication failed Account is disable due to inactivity in Network Access Control

cisco ise 2.4 Administrator authentication failed Account is disable due to inactivity

Nadia Bbz — Wed, 18 Dec 2019 10:00:56 GMT

i get always event just for Admin Name=admin

event : Administrator authentication failed. Account is disable due to inactivity

event details : Account is suspended temporarily.

how to solved this issue?

notice that i use another account to access identity engine service GUI

Re: cisco ise 2.4 Administrator authentication failed Account is disable due to inactivity

Seb Rupik — Wed, 18 Dec 2019 10:30:12 GMT

Hi there,

Take a look under:

Administration -> Identity Management -> Settings -> User Authentication Settings -> Account Disable Policy

...either increase the value for "Disable accounts after xx days of activity" or uncheck the box.

cheers,

Seb.

Re: cisco ise 2.4 Administrator authentication failed Account is disable due to inactivity

Nadia Bbz — Wed, 18 Dec 2019 10:46:32 GMT

it's already uncheck

as show attached

Re: cisco ise 2.4 Administrator authentication failed Account is disable due to inactivity

Seb Rupik — Wed, 18 Dec 2019 11:47:35 GMT

Ah try:

Administration -> System -> Admin Access -> Account Disable Policy

Re: cisco ise 2.4 Administrator authentication failed Account is disable due to inactivity

Nadia Bbz — Wed, 18 Dec 2019 12:09:59 GMT

it's also already unchecked

as show in attached

Re: cisco ise 2.4 Administrator authentication failed Account is disable due to inactivity

balaji.bandi — Wed, 18 Dec 2019 15:43:00 GMT

Once you saved the config, can you check same thing effected over command line as mentioned below guide :

https://community.cisco.com/t5/security-documents/tips-for-new-ise-administrators/ta-p/3891856#toc-hId--1930721573

Re: cisco ise 2.4 Administrator authentication failed Account is disable due to inactivity

Nadia Bbz — Thu, 19 Dec 2019 14:50:15 GMT

hey,

thanks for reply

how to Create alternate super admin in Cli

every 45 minute , i get notification that account admin is disable temporally due to inactivity but i can access to appliance with account name = admin , after logging notification stop , when i log out and i access with another account to appliance , i receive again every 45 minute notification