ISE-PIC WMI-Agent fail.

Ramirov — Tue, 15 Mar 2022 15:47:26 GMT

Hello guys ,

I am having problems to stablish WMI connection from ISE-PIC to ADs . I received the following error .

I've tried to deploy the agent automatically and all seems good but I not receiving any session information , I am using a user in admin group in AD.

Any way to thoubleshoot this problems?

Ive already opened a tk to Tac but they are research also.

Thanks.

Re: ISE-PIC WMI-Agent fail.

Tariq Mahmoud — Thu, 02 Mar 2023 10:10:19 GMT

That error message is expected if the first setup attempt was successful. This is a cosmetic issue (assuming that everything is fine and the permissions of the used AD account are correct). Check: https://bst.cisco.com/bugsearch/bug/CSCvq84524

Now coming to the fact that there are no sessions, I assume that you are checking for passive ID sessions from Work Centers > PassiveID > Overview > Live sessions and filter for WMI generated logs. If that's true, I would confirm multiple points to troubleshoot this:

1. Do you have events 4768 & 4770 events on the AD for the users?

2. Enable passiveID debugs on ISE on the node running the passiveID and check the debugs if there are events received from AD.
https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/212594-debugs-to-troubleshoot-on-ise.html

If points #1 and #2 are okay, I would check logging on ISE as it might be a logging issue where such logs are received to the PassiveID node but the MNT is not working fine.

topic ISE-PIC WMI-Agent fail. in Network Access Control

ISE-PIC WMI-Agent fail.

Re: ISE-PIC WMI-Agent fail.