topic Re: Uncredential scan on Cisco ISE - Nessus Scanner in Network Access Control

Uncredential scan on Cisco ISE - Nessus Scanner

Lyn17 — Thu, 13 Apr 2023 16:05:53 GMT

Hi everyone,

I just upgraded our ISE from 3.1 to 3.2. Before the upgrade, I'm able to scan get a credential scan using a domain user account on ISE with ACAS. However, after the upgrade, I'm no longer able to get a credential scan using the same domain user account. I already have a ticket open with TAC, but I'm just checking if anyone here have had the same issue and was able to resolve it.

Thanks in advanced.

Re: Uncredential scan on Cisco ISE - Nessus Scanner

Mark Elsen — Thu, 13 Apr 2023 16:42:30 GMT

- Check ISE logs related to the credential scan process (e.g.) ,

Re: Uncredential scan on Cisco ISE - Nessus Scanner

ahollifield — Thu, 13 Apr 2023 17:48:36 GMT

Why do you wish to do this? ISE is a hardened appliance based on Linux but its shell is not a normal Linux shell.

Re: Uncredential scan on Cisco ISE - Nessus Scanner

Lyn17 — Thu, 13 Apr 2023 18:48:48 GMT

We need it for DoD compliance. Our cyber and validator need to have the nessus scan files for the ISE servers.

Re: Uncredential scan on Cisco ISE - Nessus Scanner

ahollifield — Fri, 14 Apr 2023 17:56:55 GMT

What are they looking to find?

Re: Uncredential scan on Cisco ISE - Nessus Scanner

hslai — Sun, 16 Apr 2023 00:00:13 GMT

Likely CSCwd51409, which is resolved in ISE 3.2 Patch 1.

Re: Uncredential scan on Cisco ISE - Nessus Scanner

Lyn17 — Mon, 17 Apr 2023 11:05:15 GMT

Vulnerabilities and/or bug such as CSCwd51409. There was a vulnerability (medium) on ISE that's the reason why I upgrade to 3.2 Patch 1 to resolve it. Unfortunately, after the upgrade, the CLI join domain was broken and I can no longer do a credential scan our 2 ISE nodes.