topic Re: Active Endpoints showing as 0 in ISE in Network Access Control

Active Endpoints showing as 0 in ISE

DigiDen — Thu, 02 Nov 2023 09:21:43 GMT

Good morning, I recently had the issue, where we couldn't profile or add endpoint devices into our ISE deployment. We were getting the error, "unable to create the endpoint/Endpoint already exists in the database. As recommended, I ran the "Reset Identity Services Engine (ISE) Context Visibility" which did cure the issue (although we do see it still occasionally) but it then reset my active endpoints to 0.

ISE is running as expected, devices are profiling, and we can add endpoints to the database manually if required.

Is it worth running the Reset again? Is it anything to worry about?

CISCO ISE
SNS-3655-K9
Version Identifier (VID)
ADE-OS Version
3.1.0.135

thanks,

Den

Re: Active Endpoints showing as 0 in ISE

ahollifield — Thu, 02 Nov 2023 11:05:00 GMT

Did you rebuild the CV after the reset? Or just reset only? Once you reset you have to run option 21 to rebuild the CV database.

Re: Active Endpoints showing as 0 in ISE

DigiDen — Thu, 02 Nov 2023 11:08:36 GMT

Yes, 99% confident that I did, as it's listed on the Document to run option 21.

Re: Active Endpoints showing as 0 in ISE

ahollifield — Thu, 02 Nov 2023 11:19:50 GMT

Hm I would say a TAC case is in order. Also ensure you have RADIUS accounting properly configured on your NADs.

Re: Active Endpoints showing as 0 in ISE

DigiDen — Thu, 02 Nov 2023 11:22:49 GMT

Thank you, Will do, there were endpoints listed in the active endpoints container before the context visibility process was run. Will give TAC a shout.

Re: Active Endpoints showing as 0 in ISE

DigiDen — Thu, 16 Nov 2023 08:55:09 GMT

Just to update, as part of the internal certificate renewal update, both of the policy servers were restarted. This has resolved the issue.