topic Re: 5400 Authentication failed Windows 10 clients in Network Access Control

5400 Authentication failed Windows 10 clients

InfraISE2020 — Fri, 26 Feb 2021 10:03:37 GMT

Hi,

We have recently come across an issue where our Windows clients are getting prompted to enter a username/password when connecting to our corporate network. Nothing has been changed on our environment and its been working fine until a few weeks ago. The only change is users have been upgraded to Windows 10 1909, nothing has changed on ISE.

I have looked through the logs and we're getting an event "5400 Authentication Failed" & "11514 Unexpectedly received empty TLS message; treating as a rejection by the client", screenshot of the error attached.

Has anyone else come across this issue and have you been able to resolve it.

Thanks in advance.

Ashley

Re: 5400 Authentication failed Windows 10 clients

Marcelo Morais — Fri, 26 Feb 2021 11:18:30 GMT

Hi @InfraISE2020 ,

if you are using AnyConnect as a Supplicant ... please take a look at the Event Viewer > Applications and Services Logs > Cisco AnyConnect Secure Mobile Client for any issues during the process.

Hope this helps !!!

Re: 5400 Authentication failed Windows 10 clients

Mark Elsen — Fri, 26 Feb 2021 11:18:51 GMT

- What type of authenticating servers are being used, and what's in the their logs for these auth-attempts ?

Re: 5400 Authentication failed Windows 10 clients

InfraISE2020 — Fri, 26 Feb 2021 11:33:23 GMT

Hi @Marcelo Morais

We aren't using anyconnect, were just using 802.1x from Cisco Meraki to ISE and the clients have a standard windows 10 802.1x wlan profile configured for them to connect to the SSID.

Any ideas?

Re: 5400 Authentication failed Windows 10 clients

InfraISE2020 — Fri, 26 Feb 2021 11:39:08 GMT

Hi @Mark Elsen

Thanks for the quick response. We are using 802.1x from Meraki to ISE and the clients are using a windows 802.1x WLAN profile to connect to the SSID.

Could you confirm what logs you're referring to and i will provide an output of them?

Thanks

Re: 5400 Authentication failed Windows 10 clients

Mike.Cifelli — Fri, 26 Feb 2021 12:33:26 GMT

Please share your native supplicant configuration from one of the clients. AFAIK this error is typically from the following:

-The supplicant/client machine is not accepting ISE cert

-Supplicant is configured to validate server cert. However, it does not trust the ISE cert presented

Which is causing ISE to treat it as rejected. Please verify if you have validate server cert configured/enabled in supplicant setup. Also, ensure that the cert chain is imported on the client side so that the presented ISE cert is trusted. HTH!

Re: 5400 Authentication failed Windows 10 clients

mdmujahiduzzaman — Tue, 16 Aug 2022 08:48:51 GMT

Please check ISE system certificate validation.