topic Re: Generate report of accurate current active session in Network Access Control

Generate report of accurate current active session

sot01 — Mon, 21 Feb 2022 10:26:51 GMT

I trying to generate report of actual active device from cisco ISE version 2.7, but the report generated is not accurate (7103 actives, I generated from Contextual Visibility --> Endpoint).

While I check on License (Administration --> License) and found that based license used only 6001.

So how we could generated the accurate active endpoint devices

Re: Generate report of accurate current active session

Arne Bier — Mon, 21 Feb 2022 23:11:02 GMT

Hello @sot01

Context Visibility will collect every endpoint that has communicated with ISE. By active, you mean active RADIUS session. And that changes constantly. Therefore the best you can do is to export the entire Context Visbility and then analyse that in a spreadsheet - sort by "last active date" to get an idea of the "old stuff" that is just lying around. If for example you have a guest network, then you will accumulate a lot of endpoints that you may never see again. And MAC randomisation could also slightly inflate the numbers. e.g. if the same physical device connects to your wireless network on different SSIDs then each connection may present its own MAC address. Not to mention, same device connected by wired and by wireless - more MAC addresses.

Re: Generate report of accurate current active session

sot01 — Wed, 23 Feb 2022 07:34:28 GMT

Thanks you @Arne Bier, Thanks you for your suggestion.

Do we have any alternative solution beside this?

Re: Generate report of accurate current active session

Arne Bier — Wed, 23 Feb 2022 20:37:58 GMT

Have you tried clicking on the "Active Endpoints" dashlet on the Dashboard? That will list all the currently active sessions