topic Re: Random Authentication fails on ISE in Network Access Control

Random Authentication fails on ISE

lowfell — Sat, 11 Jul 2020 17:02:49 GMT

Random authentication fails. Ssers will generally authnticate but randomly don't . affecting various users all random.

5400 Authentication failed

15039 Rejected Per authorization Profile

The Authorization profile though has never changed.

They are on version Ise version 2.4.0357 patch 10

Re: Randon Authentication fails on ISE

paul — Mon, 06 Jul 2020 17:01:44 GMT

The step data in the details of the failure should tell you what is happening. Can you post the step data and the rule you think the device should be hitting?

Re: Randon Authentication fails on ISE

lowfell — Wed, 08 Jul 2020 07:30:55 GMT

Hello.

I have seen the affected mac addresses PASS authentication

The device IS in the correct groups

Then Later the SAME device will FAIL authentication?

If you then go int to the Authorization Profile when you look at the fail, the device is no longer in the Profile groups.

This is happening randomly and affecting multiple devices. I've actually opened a TAC case now and i'm awaiting assistance.

Re: Random Authentication fails on ISE

hslai — Sat, 11 Jul 2020 20:12:01 GMT

lowfell,

Yes, you are doing it correctly by engaging Cisco TAC support.

If possible, try establishing a pattern. Otherwise, we would need debug logs for extensive time intervals, try to catch it when it happens again and then analyze the files.