topic Re: ISSUE 12511 Unexpectedly received TLS alert message reject client in Network Access Control

ISSUE 12511 Unexpectedly received TLS alert message reject client

yoga1 — Thu, 17 Jul 2025 04:45:54 GMT

I am having an issue with TLS on Windows 10 Pro. When I log in to the SSID using my Active Directory username and password, it works, but then I get an error saying “Can't connect to this network.” How can I fix this?

Re: ISSUE 12511 Unexpectedly received TLS alert message reject client

balaji.bandi — Thu, 17 Jul 2025 05:23:24 GMT

it works,

can you explain above statement ? are you able to connect to Wireless able to get connectivity and only you see the error ?

what ISE version ?

is this for all the clients only Windows 10 Pro ?

check what kind of TLS version you have, new ISE 3.3 default 1.2 you can not disable that.

check the certs make sure client have the same certs

make sure self signed certificate installed on the client PC

check ISE cert documentation :

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215621-tls-ssl-certificates-in-ise.html

Re: ISSUE 12511 Unexpectedly received TLS alert message reject client

MHM Cisco World — Thu, 17 Jul 2025 22:33:16 GMT

What is l2/l3 secuirty of this ssid

MHM

Re: ISSUE 12511 Unexpectedly received TLS alert message reject client

yoga1 — Fri, 18 Jul 2025 04:32:47 GMT

i will just connect wireles by entering username and password, when click connect get the issue.

Windows 10 Pro users only appear the error.

for certificates I use from external company domain certificates, not using certificates from ise 3.3

Re: ISSUE 12511 Unexpectedly received TLS alert message reject client

MHM Cisco World — Fri, 18 Jul 2025 07:15:58 GMT

What you use

Eap-tls or teap or peap ...etc.

MHM

Re: ISSUE 12511 Unexpectedly received TLS alert message reject client

yoga1 — Mon, 21 Jul 2025 04:54:00 GMT

I use EAP-TLS and version ISE 3.3

Re: ISSUE 12511 Unexpectedly received TLS alert message reject client

balaji.bandi — Mon, 21 Jul 2025 07:18:26 GMT

i would suggest check the configuration both NAD/NAC and ISE and also client side configuration.

https://www.wiresandwi.fi/blog/cisco-ise-top-reasons-your-certificate-authentications-are-failing

Re: ISSUE 12511 Unexpectedly received TLS alert message reject client

MHM Cisco World — Mon, 21 Jul 2025 07:49:51 GMT

Are you sure ?

Eap-tls not use username and password it only use cert.

Can I see screenshots of secuirty of this wlan

MHM

Re: ISSUE 12511 Unexpectedly received TLS alert message reject client

yoga1 — Fri, 25 Jul 2025 04:55:03 GMT

For the EAP case, I have already restored the default certificate from ise pointing to EAP authentication.

Re: ISSUE 12511 Unexpectedly received TLS alert message reject client

Ambuj M — Mon, 28 Jul 2025 02:33:52 GMT

download ISE log as PDF and share complete log, also share screen shot of your ISE policy