https://community.cisco.com/t5/network-access-control/trustsec-cts-enabled-devices-lose-connection/m-p/4910700#M583602 <P>Hi Everyone,</P><P>We recently enabled our Trustsec matrix and applied CTS configuration across estate, its working well all apart from via 1 Border whereby since enabling End user devices connected via here lose connectivity for just 1 or 2 pings at 2am'ish and 4am'ish each early morning. I've checked the Edge node and ports all look good with zero drops. I went through the Trustsec troubleshooting guide and everything also looks ok.</P><P>What i have noticed is the Fusion/WAN node that this Border connects to is somehow missing all AAA config (no aaa new-model in configuration), just wondering if this would effect CTS working correctly at any site directly connected to it (currently only the 1)? or any other suggestions as struggling to find a cause for the drops in connectivity. many thanks</P><P>Apologies if post in wrong section</P> Wed, 23 Aug 2023 15:02:42 GMT MarkAntony 2023-08-23T15:02:42Z https://community.cisco.com/t5/network-access-control/trustsec-cts-enabled-devices-lose-connection/m-p/4910700#M583602 <P>Hi Everyone,</P><P>We recently enabled our Trustsec matrix and applied CTS configuration across estate, its working well all apart from via 1 Border whereby since enabling End user devices connected via here lose connectivity for just 1 or 2 pings at 2am'ish and 4am'ish each early morning. I've checked the Edge node and ports all look good with zero drops. I went through the Trustsec troubleshooting guide and everything also looks ok.</P><P>What i have noticed is the Fusion/WAN node that this Border connects to is somehow missing all AAA config (no aaa new-model in configuration), just wondering if this would effect CTS working correctly at any site directly connected to it (currently only the 1)? or any other suggestions as struggling to find a cause for the drops in connectivity. many thanks</P><P>Apologies if post in wrong section</P> Wed, 23 Aug 2023 15:02:42 GMT https://community.cisco.com/t5/network-access-control/trustsec-cts-enabled-devices-lose-connection/m-p/4910700#M583602 MarkAntony 2023-08-23T15:02:42Z https://community.cisco.com/t5/network-access-control/trustsec-cts-enabled-devices-lose-connection/m-p/4928203#M584227 <P>The ISE default for cts environment refresh is 24 hours - does the issue with the traffic drops occur with the timing of the cts environment refresh?</P><P>hth<BR />Andy</P> Sun, 24 Sep 2023 00:10:43 GMT https://community.cisco.com/t5/network-access-control/trustsec-cts-enabled-devices-lose-connection/m-p/4928203#M584227 andrewswanson 2023-09-24T00:10:43Z