topic Re: Alarms: Active directory diagnostic tool found issues in Network Access Control

Alarms: Active directory diagnostic tool found issues

sinady — Thu, 24 Jun 2021 07:52:48 GMT

Dear Team,

I'm facing issue with alarm "Active directory diagnostic tool found issues"

it alert everyday.

Note: currently i using ISE 2.7 patch 3.

Description

One or more Active Directory diagnostic tests failed during a scheduled run.

Suggested Actions

Run the Active Directory Diagnostic Tool to check current status and view details of issues. Go to External Identity Sources, Active Directory and activate from Advanced Tools.

It could have any issue or impact to ISE server and production or not if it still alert like this?

Really appreciated if anyone could help and advise on this.

Re: Alarms: Active directory diagnostic tool found issues

Mark Elsen — Thu, 24 Jun 2021 11:54:24 GMT

- FYI : https://community.cisco.com/t5/network-access-control/active-directory-diagnostic-tool-found-issues/td-p/3575302

Re: Alarms: Active directory diagnostic tool found issues

Marcelo Morais — Thu, 24 Jun 2021 13:02:43 GMT

Hi @sinady ,

at Administration > Identity Management > External Identity Sources > Active Directory > select your AD, click Diagnostic Tools, to check the failed diagnostic test, for example:

Hope this helps !!!

Re: Alarms: Active directory diagnostic tool found issues

sinady — Tue, 29 Jun 2021 07:51:25 GMT

Thank @Marcelo Morais for suggestion.

If we do that, there is any impact to the operation?

Re: Alarms: Active directory diagnostic tool found issues

sinady — Tue, 29 Jun 2021 07:59:30 GMT

Thank @Mark Elsen , I don't see the solution.

Could you advise, please!

Re: Alarms: Active directory diagnostic tool found issues

Marcelo Morais — Tue, 29 Jun 2021 13:47:35 GMT

Hi @sinady ,

no impact.

Hope this helps !!!

Re: Alarms: Active directory diagnostic tool found issues

sinady — Wed, 30 Jun 2021 11:29:18 GMT

Hi @Marcelo Morais , Thank you so much for your confirmed.

I already run all of nodes. then we got status on all nodes are warning DNS SRV record query.

Please see in the attached file for more detail.

Please help to advise on this. Thank you so much.

Re: Alarms: Active directory diagnostic tool found issues

Marcelo Morais — Wed, 30 Jun 2021 22:41:39 GMT

Hi @sinady ,

check the following:

ise/admin# nslookup <Node IP Addr> querytype AAAA
Trying "<Node Reverse IP Addr>.in-addr.arpa"
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41346
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;<Node Reverse IP Addr>.in-addr.arpa. IN PTR
;; ANSWER SECTION:
<Node Reverse IP Addr>.in-addr.arpa. 14400 IN PTR <Node FQDN>
Received 80 bytes from <DNS IP Addr>#53 in 1 ms

Hope this helps !!!

Re: Alarms: Active directory diagnostic tool found issues

sinady — Thu, 01 Jul 2021 07:24:13 GMT

Hi, what is the purpose to do that? and just only run that command below ?

nslookup <Node IP Addr> querytype AAAA

Re: Alarms: Active directory diagnostic tool found issues

Marcelo Morais — Tue, 06 Jul 2021 23:37:54 GMT

Hi @sinady ,

a quick check to DNS and Reverse IP Addr.

Regards