topic Re: ISE 5238 Endpoint authentication problem was fixed in Network Access Control

ISE 5238 Endpoint authentication problem was fixed

MichelB — Wed, 15 Nov 2023 11:12:30 GMT

Is there a way to suppress the ISE messages " 5238 Endpoint authentication problem was fixed" as the message itself is misleading? Most common this message from ISE in the live log is letting you know that the Endpoint is removed from the automatic ISE suppression log as it failed for some reason multiple authentication attempts.

thanks in advance

Michel

Re: ISE 5238 Endpoint authentication problem was fixed

balaji.bandi — Wed, 15 Nov 2023 11:45:23 GMT

what ISE version ? what end device ?

have you checked below thread may help you :

https://community.cisco.com/t5/network-access-control/5238-endpoint-authentication-problem-was-fixed/td-p/3461702

Re: ISE 5238 Endpoint authentication problem was fixed

MichelB — Wed, 15 Nov 2023 12:12:15 GMT

I Adjust the Anomalous Client Suppression on ISE timers ( https://community.cisco.com/t5/security-knowledge-base/configuring-anomalous-client-suppression-on-ise/ta p/3161437#:~:text=same%20failure%20reason.-,Configuration,be%20reported%20every%20Reporting%20Interval )

This in order to dampen the false postitives that something was fixed whiled it was not broken in the first place.

Re: ISE 5238 Endpoint authentication problem was fixed

adamscottmaster2013 — Wed, 15 Nov 2023 14:58:19 GMT

I can confirm that the problem was fixed in ISE version 3.0 patch-3 on my system but it comes back in my ISE 3.2 patch-4 system.