topic Re: PC start-up process keep delay time in Network Access Control

PC start-up process keep delay time

Da ICS16 — Thu, 22 May 2025 05:52:19 GMT

Dear Cisco,

We user ISE v 3.1 P10 with Closed-Mode configuration.

We notice when pc start up un till log in AD user successful to delay more time. Some times it take round over 5mins or more than.

Kindly share your commend / good practice to reduce the slow log in time.

Best Regards.

Re: PC start-up process keep delay time

Rob Ingram — Thu, 22 May 2025 05:57:28 GMT

@Da ICS16 are the computers configured for "user or computer authentication" or "user authentication" or just "computer authentication". What do the ISE live logs indicate for the computer? From the CLI of the switch run "show authentication session interface x/y/z detail" whilst the computer is starting up and whilst there is the delay. Provide the output for review.

Re: PC start-up process keep delay time

ahollifield — Thu, 22 May 2025 12:05:00 GMT

Why closed mode?

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/identity-service-engine-software-3-1-3-2.html

Re: PC start-up process keep delay time

Da ICS16 — Mon, 26 May 2025 04:41:40 GMT

Hello @ahollifield Seem m not get the point. Can you share more detailed with your mentioned statement, Why closed mode?

Re: PC start-up process keep delay time

ahollifield — Tue, 27 May 2025 12:33:44 GMT

What is the use-case for closed mode? Why not low-impact?