topic Re: Issue with PSN Logs and 802.1X Authentication After Upgrading to P in Network Access Control https://community.cisco.com/t5/network-access-control/issue-with-psn-logs-and-802-1x-authentication-after-upgrading-to/m-p/5271761#M595499 <P>I regenerated the ISE messaging service certificate for both the primary and secondary nodes, as well as all PSNs. The issue was resolved for 2 to 3 days, but then it reoccurred. Has anyone encountered this before or found a permanent solution?</P> Sun, 16 Mar 2025 13:04:33 GMT m.soleimani 2025-03-16T13:04:33Z Issue with PSN Logs and 802.1X Authentication After Upgrading to Patch https://community.cisco.com/t5/network-access-control/issue-with-psn-logs-and-802-1x-authentication-after-upgrading-to/m-p/5268999#M595382 <P>Hi everyone,<BR />I’m running Cisco ISE version 3.1.0.518. About 30 days ago, I changed the Root CA and all PSN certificates, and everything worked fine.</P><P>Two weeks ago, I upgraded to Patch 10, and the system continued to function normally. However, five days ago, I noticed that I was no longer receiving live logs from other PSN nodes, and new devices were unable to connect via 802.1X authentication.</P><P>To troubleshoot, I restarted the affected PSN node, which temporarily resolved the issue, but the problem has returned.</P><P>Has anyone encountered this issue before, or does anyone have suggestions on how to resolve it?</P><P>Thanks in advance for your help!</P> Sat, 08 Mar 2025 15:02:58 GMT https://community.cisco.com/t5/network-access-control/issue-with-psn-logs-and-802-1x-authentication-after-upgrading-to/m-p/5268999#M595382 m.soleimani 2025-03-08T15:02:58Z Re: Issue with PSN Logs and 802.1X Authentication After Upgrading to P https://community.cisco.com/t5/network-access-control/issue-with-psn-logs-and-802-1x-authentication-after-upgrading-to/m-p/5269011#M595383 <P>&nbsp;</P> <P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;- This document offers ISE debugging info's and possible logs to examine :<BR />&nbsp; &nbsp; &nbsp; &nbsp;<A href="https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/222247-use-debugging-system-to-troubleshoot-ise.html" target="_blank">https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/222247-use-debugging-system-to-troubleshoot-ise.html</A></P> <P>&nbsp; &nbsp; A common one to start with is&nbsp;<SPAN>&nbsp;</SPAN><STRONG><CODE class="cCN_CmdName"><FONT color="#000000">show logging system ade/ADE.log tail</FONT><BR /><FONT color="#000000">&nbsp; (or without the tail option)</FONT><BR />&nbsp; &nbsp; &nbsp; &nbsp;<FONT color="#008000">&nbsp;&nbsp;</FONT></CODE></STRONG></P> <P>&nbsp; M.</P> Sat, 08 Mar 2025 16:24:04 GMT https://community.cisco.com/t5/network-access-control/issue-with-psn-logs-and-802-1x-authentication-after-upgrading-to/m-p/5269011#M595383 Mark Elsen 2025-03-08T16:24:04Z Re: Issue with PSN Logs and 802.1X Authentication After Upgrading to P https://community.cisco.com/t5/network-access-control/issue-with-psn-logs-and-802-1x-authentication-after-upgrading-to/m-p/5271761#M595499 <P>I regenerated the ISE messaging service certificate for both the primary and secondary nodes, as well as all PSNs. The issue was resolved for 2 to 3 days, but then it reoccurred. Has anyone encountered this before or found a permanent solution?</P> Sun, 16 Mar 2025 13:04:33 GMT https://community.cisco.com/t5/network-access-control/issue-with-psn-logs-and-802-1x-authentication-after-upgrading-to/m-p/5271761#M595499 m.soleimani 2025-03-16T13:04:33Z Re: Issue with PSN Logs and 802.1X Authentication After Upgrading to P https://community.cisco.com/t5/network-access-control/issue-with-psn-logs-and-802-1x-authentication-after-upgrading-to/m-p/5275156#M595647 <P>Hi marce,</P><P>Here is the log from one of our PSNs. I would appreciate any insights or suggestions. Thanks!</P> Wed, 26 Mar 2025 06:48:19 GMT https://community.cisco.com/t5/network-access-control/issue-with-psn-logs-and-802-1x-authentication-after-upgrading-to/m-p/5275156#M595647 m.soleimani 2025-03-26T06:48:19Z Re: Issue with PSN Logs and 802.1X Authentication After Upgrading to P https://community.cisco.com/t5/network-access-control/issue-with-psn-logs-and-802-1x-authentication-after-upgrading-to/m-p/5275212#M595651 <P>I see only one ERROR and couple of FAILED events in the logs:</P><P>2025-03-26T09:46:06.178094+03:30 THT-ISE-01 kong-error 2025/03/26 09:46:06 [info] 25#0: *76833060 client 172.17.26.24 closed keepalive connection</P><P>Maybe there is a DB issue, bug or some other problem. Have you tried contacting TAC?</P> Wed, 26 Mar 2025 08:42:49 GMT https://community.cisco.com/t5/network-access-control/issue-with-psn-logs-and-802-1x-authentication-after-upgrading-to/m-p/5275212#M595651 klnnnnng 2025-03-26T08:42:49Z