topic Error on downloading agent resources resources from Cisco in Network Access Control

Error on downloading agent resources resources from Cisco

Capricorn — Fri, 21 Feb 2020 18:47:07 GMT

Hi!

I am trying to download the native supplicant from cisco site but getting the following error.

I have all the SSL certifcate in placed.

"Connection to the remote site has failed. Verify that the remote site is available and/or related ISE administration settings are correct."

I have direct access to Internet and can see the traffic is passing from our Firewall and see TCP FINs.

Re: Error on downloading agent resources resources from Cisco

Ben Walters — Thu, 01 Mar 2018 20:56:26 GMT

What is the URL that ISE is trying to hit is it a valid URL?

Is ISE able to resolve with DNS?

Re: Error on downloading agent resources resources from Cisco

Capricorn — Thu, 01 Mar 2018 20:59:43 GMT

I dont know the exact URL.

I am going to Policy -> Results -> Client Provisioning -> Resources -> Add -> Agent resources from Cisco site and getting error.

dns works fine as I can do nslookup from ise box on cisco.com

Re: Error on downloading agent resources resources from Cisco

Ben Walters — Thu, 01 Mar 2018 21:10:00 GMT

This is from a config guide for ISE provisioning resources. It seems that Cisco recommends manually downloading and uploading to ISE rather than the auto update.

To ensure that you are able to access the appropriate remote location from which you can download client-provisioning resources to Cisco ISE, you may be required to verify that you have the correct proxy settings configured for your network. If your network restricts URL-redirection functions (via a proxy server, for example) and you are experiencing difficulty accessing the default URL, try also pointing your Cisco ISE to https://www.perfigo.com/ise/provisioning-update.xml .

The default URL for downloading client-provisioning resources is https://www.cisco.com/web/secure/pmbu/provisioning-update.xml .

Cisco recommends manually uploading resources whenever possible rather than opting to upload them automatically.

Step 1 Choose Administration > System > Settings > Client Provisioning .

Step 2 From the Enable Automatic Download drop-down list, choose Enable .

Step 3 Specify the URL where Cisco ISE searches for system updates in the Update Feed URL text box.

Step 4 Click Save .

Maybe this will help you more, it provides the URL and a backup to try.

Re: Error on downloading agent resources resources from Cisco

Capricorn — Thu, 01 Mar 2018 21:18:18 GMT

I have this site.

https://www.cisco.com/web/secure/pmbu/provisioning-update.xml

Your site is doing some trick.. Downloading 🙂

Can you point me to the guide link?

Re: Error on downloading agent resources resources from Cisco

Ben Walters — Thu, 01 Mar 2018 21:26:30 GMT

https://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_client_prov.html#43943