topic Re: Endpoint MAC address not shown in Endpoint Classification but it e in Network Access Control

Endpoint MAC address not shown in Endpoint Classification but it exist

rezaalikhani — Sat, 06 May 2023 03:46:04 GMT

Hi all;

I have a strange case in my ISE demo lab. I have an endpoint with "F0:BF:97:5B:0F:B4" MAC address. The switch that is connected to that endpoint is configured to use MAB method. Everything is OK and the endpoint is profiled using "Windows10-Workstation", as you can see below:

The problem is that, when I search for the endpoint in Endpoint Classification section, nothing related to the endpoint shown:

Now I want to import that endpoint using import functionality in the "Endpoint Classification" section. But:

I am using ISE 3.1 Patch6 in my lab...

Any ideas?

Thanks

Re: Endpoint MAC address not shown in Endpoint Classification but it e

Nancy Saini — Sat, 06 May 2023 18:08:44 GMT

Seems like the context visibility page is not in sync with the database. Are you able to view any endpoint on the context visibility? Also, check if PAN is able to resolve forward and reverse nslookup.

Re: Endpoint MAC address not shown in Endpoint Classification but it e

Arne Bier — Sun, 07 May 2023 20:18:22 GMT

As Nancy suggested, try to find that endpoint via the Menu "Context Visibility > Endpoints" directly, since it seems the screenshot you have provided has an additional filter applied ("Anomalous Behavior")

Re: Endpoint MAC address not shown in Endpoint Classification but it e

DigiDen — Thu, 17 Aug 2023 08:45:01 GMT

Interestingly, I also have this issue, I cannot see the endpoint in either, "Endpoint Classification" or "Context Visibility - Endpoint" If it is a sync issue with the database, what would the solution be?

Re: Endpoint MAC address not shown in Endpoint Classification but it e

Greg Gibbs — Thu, 17 Aug 2023 22:08:41 GMT

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-23/213610-ise-2-3-rest-sync-context-visibility.html

Re: Endpoint MAC address not shown in Endpoint Classification but it e

thiru.vel10 — Wed, 01 May 2024 07:26:34 GMT

Make sure sw interface configured with do1q / NAC . After they search from endpoint visible context search tab .

worked for me