topic Re: Endpoint log in ISE in Network Security

Endpoint log in ISE

interfacedy — Mon, 06 Sep 2021 21:30:00 GMT

Hi Diagram is like this PC--Switch--ISE. An internal account is created at ISE. After login, The Live logs shows like below. In Status column, one is Green and other is Blue. What is that meaning with Blue? and screenshot for PC nic is like the second picture. It shows Undentified Network, are these normal? Thank you

Re: Endpoint log in ISE

Amine ZAKARIA — Mon, 06 Sep 2021 21:35:00 GMT

@interfacedy ,

The green status means Authentication has succeeded

The blue status means the sessions has started, in other word ISE received the Accounting Start for that succeeded authentication.

There's a third status RED which means authentication failed.

And screenshot for PC nic is like the second picture. It shows Undentified Network, are these normal? Do you have access to the network after authentication, can you ping anything ?

Re: Endpoint log in ISE

interfacedy — Mon, 06 Sep 2021 22:04:59 GMT

Thank you Amine!

Do you have access to the network after authentication, can you ping anything ?

PC can ping anything it should. If login repeatedly, the log shows many Green status, but the Blue is only one on the top in this column.

I guess this is relative with non domain user

Re: Endpoint log in ISE

Amine ZAKARIA — Mon, 06 Sep 2021 22:15:48 GMT

@interfacedy ,

Each time you login you will see that green status and yes using RADIUS each authentication has the blue status (NAD telling the ISE this session has started Accounting-Start).

For the second question, i thought you are using AD, generally you will see example.com in domain joined machine.

Hope that helps.