topic Re: ISE Messaging service in Network Access Control

ISE Messaging service

jan.murin — Tue, 21 Jan 2020 14:24:59 GMT

Hello everyone,

We had a problem with our ISE that didn't respond to any RADIUS and TACACS requests. The TAC case was resolved by disabling the option "Use "ISE Messaging Service" for UDP Syslogs delivery to MnT".

As this option is turned on by default on ISE 2.6 patch 2 onwards I am really curious what exactly is the ISE Messaging Service purpose?

In the documentation, there are just some basics, but I didn't find what is the purpose of this service and why the behaviour was changed.

Thanks in advance.

Re: ISE Messaging service

Greg Gibbs — Tue, 21 Jan 2020 20:40:25 GMT

ISE 2.6 introduces an option for using lightweight RabbitMQ transport for Secure Syslog with some built-in WAN Survivability features. Have a look at the following Cisco Live presentation for more info:

Cisco Live 2019 San Diego: Advanced ISE Architect, Design and Scale ISE for your production networks

Here's a screenshot from one of the slides:

Cheers,

Greg

Re: ISE Messaging service

mbrustman — Thu, 01 May 2025 12:51:26 GMT

Can you provide more information on the warning about enabling for Larger Systems requires system hardening before being allowed? We are running 3.3

Re: ISE Messaging service

Marcelo Morais — Thu, 01 May 2025 13:28:19 GMT

Hi @mbrustman ,

please take a look at ISE - Queue Link Error, search for ISE Messaging Settings.

Hope this helps !!!