topic Re: Active Directory diagnostic tool found issues in Network Access Control

Active Directory diagnostic tool found issues

John Vierra — Tue, 12 Jun 2018 15:00:20 GMT

I have received this error message a few times and I'm trying to find out what it means and what to do about it. If I follow the instructions in the alert and manually run the test it always comes back as passing. I'm running 2.4.0.357 with patch 1.

Thanks

Alarm Name :

Active Directory diagnostic tool found issues

Details :

AcsSyslogContentAaaDiagnostics:: ACTIVE_DIRECTORY_DIAGNOSTIC_TOOL_ISSUES_FOUND need to complete

Description :

One or more Active Directory diagnostic tests failed during a scheduled run.

Severity :

Warning

Suggested Actions :

Run the Active Directory Diagnostic Tool to check current status and view details of issues. Go to External Identity Sources, Active Directory and activate from Advanced Tools.

*** This message is generated by Cisco Identity Services Engine (ISE) ***

Sent By Host : vierra-ise

Re: Active Directory diagnostic tool found issues

hslai — Tue, 12 Jun 2018 18:49:57 GMT

ISE 2.4 will automatically and periodically run the AD diagnostics. Prior to 2.4, such tests are only triggered manually by an ISE admin user.

Re: Active Directory diagnostic tool found issues

John Vierra — Tue, 12 Jun 2018 19:11:27 GMT

Thanks. But what I can’t figure out is what’s failing?

Re: Active Directory diagnostic tool found issues

hslai — Tue, 12 Jun 2018 19:39:35 GMT

The screenshot in your initial post is not showing up for me. Did you try manually running the tests?

Below is a CFD on this feature, FYI:

CSCvj13757

ISE 2.4 - Unable to acknowledge AD Diagnostic Failure Alarm

Re: Active Directory diagnostic tool found issues

John Vierra — Tue, 12 Jun 2018 21:01:53 GMT

I did manually run it and they all pass. That is what is weird to me. Trying to figure out if it actually failed when it said it did. And id yes what failed at that time.

Thanks

Alarm Name :

Active Directory diagnostic tool found issues

Details :

AcsSyslogContentAaaDiagnostics:: ACTIVE_DIRECTORY_DIAGNOSTIC_TOOL_ISSUES_FOUND need to complete

Description :

One or more Active Directory diagnostic tests failed during a scheduled run.

Severity :

Warning

Suggested Actions :

Run the Active Directory Diagnostic Tool to check current status and view details of issues. Go to External Identity Sources, Active Directory and activate from Advanced Tools.

This message is generated by Cisco Identity Services Engine (ISE) ***

Sent By Host : vierra-ise

Re: Active Directory diagnostic tool found issues

kevink707 — Mon, 19 Aug 2019 15:03:03 GMT

I got this error and I don't even have activity directory configured.

Re: Active Directory diagnostic tool found issues

sinady — Tue, 29 Jun 2021 07:56:34 GMT

Hi,

I have the same issue. Currently i using Cisco ISE 2.7 patch 3.

Really appreciate for your advise.

Re: Active Directory diagnostic tool found issues

hpenley — Fri, 13 Aug 2021 12:34:43 GMT

I have this issue and I'm running 2.6.0.156 which is the version that the bug says fixed the issue. It did not fix it for me.

Re: Active Directory diagnostic tool found issues

edonaghy1 — Fri, 22 Oct 2021 08:19:04 GMT

Hi,

I have this issue in ISE 2.7 patch 4.........

Re: Active Directory diagnostic tool found issues

sinady — Sat, 23 Oct 2021 16:54:49 GMT

Hi @edonaghy1 and Team,

Did you received any release version ISE 2.7 patch 5?

I'm not sure if it fixed with patch 5. If you get more information about patch 5 has been fixed this issue. please keep posted here.

Currently i still have this issue as well.

Thank you so much.

Re: Active Directory diagnostic tool found issues

Marcelo Morais — Sat, 23 Oct 2021 22:08:14 GMT

Hi @sinady ,

do you have 2.7 P4 and also do you have issues with Diagnostic Tool (at Administration > Identity Management > External Identity Sources > Active Directory)?

What kind of issue that you are having on Diagnostic Tool (please provide a PrtScr)?

Regards !!!

Re: Active Directory diagnostic tool found issues

Sina Dy — Tue, 26 Oct 2021 23:27:22 GMT

Hi @Marcelo Morais ,

Yes, i'm using 2.7 P4

Currently i have 3 nodes and all of nodes are having the same issue.

please check attached file for more detail.

Really appreciate for your help and advise.

Re: Active Directory diagnostic tool found issues

BrandonG95 — Tue, 23 Nov 2021 20:37:29 GMT

Hello @edonaghy1 ,

I am having this issue in Patch 5 as well. Currently have a support case open for this. We will see what I can find out.

When running tests manually, everything is successful. Glad to see that this is happening to others, Hopefully they will implement a fix sooner.

Thanks

Re: Active Directory diagnostic tool found issues

stayd — Mon, 31 Jan 2022 12:48:43 GMT

Hello @BrandonG95,

what about your TAC case ? Is it solved issue for you by now ? And if yes, how ?

Can you share the results with community ?

Re: Active Directory diagnostic tool found issues

Frank Lothar Weber — Thu, 07 Jul 2022 07:16:49 GMT

Error is still showing up on ISE 3.1, patch 3 .....

Re: Active Directory diagnostic tool found issues

BrandonG95 — Thu, 07 Jul 2022 13:24:14 GMT

TAC Case still open. No progress yet besides the engineer trying to point the finger at a bug that wasn't happening within our environment. This has been escalated with the development team. Still troubleshooting.

Re: Active Directory diagnostic tool found issues

mfox — Mon, 26 Sep 2022 14:17:11 GMT

Still happening on 3.1 patch 3, but the alert can be disabled. Go to hamburger button, System > Settings > Alarm Settings. Under Alarm Configuration, find "Active directory diagnostic tool found issues" and edit to disable.

Re: Active Directory diagnostic tool found issues

stayd — Sun, 27 Nov 2022 13:16:03 GMT

Still same even with patch 4 on 3.1 version.

Re: Active Directory diagnostic tool found issues

stayd — Sun, 27 Nov 2022 13:16:43 GMT

What is the status of tac case now ? Was it resolved by now ?

Re: Active Directory diagnostic tool found issues

marco.merlo — Tue, 02 Jan 2024 14:33:06 GMT

Same issue on ISE 3.2 patch 4 ....