topic Re: Active Directory user is always blocked by Cisco ISE in Network Access Control

Active Directory user is always blocked by Cisco ISE

anxo.darosa — Wed, 09 Mar 2022 12:19:36 GMT

Good morning.

I have a user who is always blocked his AD account.

I looked for information on the Windows Event Viewer and I found that the problem is with the Cisco ISE.

I am connected to the Cisco ISE Logs, and I viewed that the authentication is failed.

How can I solve this issue?

Rob Ingram — Wed, 09 Mar 2022 13:30:16 GMT

@anxo.darosa what is the information in the individual ISE Live Logs?

How is the user's supplicant configured, does it pass through the logged in user credentials or does the user enter the username/password manually?

anxo.darosa — Wed, 09 Mar 2022 17:17:58 GMT

@Rob Ingram thank for the quick answer.

The user has to enter the username and password manually to connect to the VPN through Cisco Anyconnect.

Rob Ingram — Wed, 09 Mar 2022 17:22:14 GMT

@anxo.darosa ok but what detailed information is contained in the live log to indicate the problem?

It just looks like the account is locked out, possibly because the user is entering an incorrect password? I assume the other users work ok?