topic Re: Cisco ISE 3.3 Policy Set Monitoring Feature in Network Access Control

Cisco ISE 3.3 Policy Set Monitoring Feature

PaulLagatta4907 — Sat, 21 Sep 2024 16:32:07 GMT

I created a couple policy rules and selected the Monitor feature. After applying the changes, I am not seeing any hits on the rules I created. I found in old forums the monitor feature really doesn't work. The customers were using 2.4 at the time of the posts. Can anyone confirm the Monitor option is still flaky in the new versions. We are running Cisco ISE 3.3 Patch 3 on SNS-3655-K9 appliances.

Thanks, Paul

Re: Cisco ISE 3.3 Policy Set Monitoring Feature

PaulLagatta4907 — Sun, 22 Sep 2024 16:31:11 GMT

The monitor feature works. Although I don't see hits on the Policy Rule Page, if I review the details of a client, ISE shows the rules the client matches to include rules set to monitor.

Re: Cisco ISE 3.3 Policy Set Monitoring Feature

thomas — Tue, 01 Oct 2024 17:29:15 GMT

Unclear what your rules were and "it doesn't work" does not help anyone reproduce your results.

See

Re: Cisco ISE 3.3 Policy Set Monitoring Feature

PaulLagatta4907 — Tue, 01 Oct 2024 19:04:10 GMT

I wasn't asking anyone to reproduce my results; I was asking was the monitor option still questionable. I found the solution to the problem. If one views the details of an endpoint, it clearly shows all rules the endpoint will match on to include rules in monitor mode.