topic Re: Failed to integrate FMC with ISE-PIC in Network Access Control

Failed to integrate FMC with ISE-PIC

Bledian — Wed, 03 May 2023 13:33:48 GMT

Hello community,

While trying to integrate FMC with ISE-PIC we are getting the error below after i press TEST while creating identity source.

Primary host:

test: ISE connection.

Preparing ISE Connection objects...

Connecting to ISE server...

Beginning to connect to ISE server...

Captured Jabberwerx log:2023-05-03T13:21:04 [ INFO]:

_reconnection_thread starts

Captured Jabberwerx log:2023-05-03T13:21:04 [ INFO]: pxgrid connection init done successfully Captured Jabberwerx log:2023-05-03T13:21:04 [ INFO]: testing connecting to host 10.128.128.41 timeout=3 ...

Captured Jabberwerx log:2023-05-03T13:21:07 [ ERROR]: connection timed out while trying to test connection to

host=10.128.128.41:ip=10.128.128.41:port=5222

Captured Jabberwerx log:2023-05-03T13:21:07 [ INFO]: _on_disconnect called ...failed to connect to ISE server, with error:ISE_CONNECTION_RESULT_FAIL_CANNOT_CONNECT_HOST. Shutting down ISEConnection.

Unable to connect to ISE server at host: '10.128.128.41'.

connectionHealthPollingThread starting.

connectionHealthPollingThread ending.

disconnecting pxgrid

Captured Jabberwerx log:2023-05-03T13:21:07 [ INFO]:

_reconnection_thread exits

Captured Jabberwerx log:2023-05-03T13:21:07 [ INFO]:

pxgrid_connection_disconnect completes

Would appreciate any kind of help,

Best regards,

BR.

Re: Failed to integrate FMC with ISE-PIC

ahollifield — Wed, 03 May 2023 15:47:40 GMT

ISE-PIC version? FMC version? Note that only 6.7+ of FMC supports pxGrid 2.0.

Re: Failed to integrate FMC with ISE-PIC

Bledian — Wed, 03 May 2023 16:01:38 GMT

Ise-pic is 3.1

Fmc 6.6

Re: Failed to integrate FMC with ISE-PIC

ahollifield — Wed, 03 May 2023 16:06:13 GMT

Yup this is your issue. ISE-PIC 3.1 dropped support for pxGrid 1.0 and only runs pxGrid 2.0. FMC 6.6 only runs pxGrid 1.0. So you need to upgrade your FMC to 6.7+ or use ISE-PIC 2.7.

https://www.cisco.com/c/en/us/products/collateral/security/firepower-ngfw/firepower-ftd-fmc-6-6x-fxos-2-8x-eol.html

Re: Failed to integrate FMC with ISE-PIC

Bledian — Wed, 03 May 2023 16:14:58 GMT

Thank you very much,

We will upgrade FMC tomorrow to latest version 7.3.1 and let you know if that fixed the problem.

Re: Failed to integrate FMC with ISE-PIC

Bledian — Tue, 09 May 2023 13:03:33 GMT

Upgraded FMC to 7.0.5 , ISE-PIC 3.1, now its working

Thanks for the help!