topic Re: ISE 2.7 Cannot create and edit authorization policy in Network Access Control

ISE 2.7 Cannot create and edit authorization policy

Sergey Bezpalov — Sun, 12 Apr 2020 10:52:21 GMT

Hello,

Cisco ISE 2.7 cannot create and edit authorization policy, it is halted on conditions step.

Fetching data from server...

What the best way to fix this?

It is not possible now to open the case in TAC.

Thank you.

Re: ISE 2.7 Cannot create and edit authorization policy

Mark Elsen — Sun, 12 Apr 2020 16:12:31 GMT

- Verify current health-status on the involved admin-node with :

show application status ise

If errors are listed , stop and re-start ise with application stop ise followed by application start ise Afterwards check the health-status of ISE again, with the initial command given.

Re: ISE 2.7 Cannot create and edit authorization policy

Sergey Bezpalov — Sun, 12 Apr 2020 16:45:08 GMT

Hi,

ISE 2.7 Services in Node

all app in stack working good and i already reboot/reload system.

( Cisco ISE 2.7.0.356 with patch 1, one and only node, small vm )

Re: ISE 2.7 Cannot create and edit authorization policy

Mark Elsen — Sun, 12 Apr 2020 16:57:07 GMT

- Check your vm's resources (CPU. memory, disk space!) not only 'locally; (from the viewpoint of the vm), but also from the managerial hyper-visor environment.

Re: ISE 2.7 Cannot create and edit authorization policy

Sergey Bezpalov — Sun, 12 Apr 2020 17:59:54 GMT

Hi,

hypervisor resources (CPU, Memory and Storage) are good and no overloaded, its monitoring automatically and i check it especially for this case (manually).

Thank you.

Re: ISE 2.7 Cannot create and edit authorization policy

Mark Elsen — Sun, 12 Apr 2020 18:02:18 GMT

- On ISE node issue show disk ; check if no partitions are full.

Re: ISE 2.7 Cannot create and edit authorization policy

Sergey Bezpalov — Sun, 12 Apr 2020 18:06:34 GMT

Hi,

"all internal filesystems have sufficient free space"

Thank you.

Re: ISE 2.7 Cannot create and edit authorization policy

sureshot — Mon, 13 Apr 2020 08:24:48 GMT

If services running properly and all resources good, May be try using different browser (Chrome>/Firefox) in Private mode.

Re: ISE 2.7 Cannot create and edit authorization policy

Mark Elsen — Mon, 13 Apr 2020 08:57:03 GMT

- Also if you would have some intranet fire-walling solution(s) in place between your browser (/terminal) and the ISE infrastructure then make sure some ISE-application traffic does not get blocked inadvertently.

Re: ISE 2.7 Cannot create and edit authorization policy

Sergey Bezpalov — Mon, 13 Apr 2020 23:16:14 GMT

Hi,

after 12 hours authorization policy editor work good (without any actions), but system use old policy with new one.

Live Logs

"Wired" is old name of policy, "Wired ONE" new name. "Profiled Workstations" none existed (deleted) rule.

Thanks.

Re: ISE 2.7 Cannot create and edit authorization policy

Sergey Bezpalov — Thu, 16 Apr 2020 01:04:49 GMT

Hi,

backup

application reset-config ise

restore

And issue was fixed.

Thanks.