DNAC Health Score Intermittent issue

[Turbo727]

Under DNAC Inventory, health score for all our devices, about 10 of them, are going on and off. they show 10 but after a while some of them show no health randomly, and then some of them change to 10 again and so on so forth. Ping to the devices seem pretty stable, It's unclear to me why DNAC does this. Any suggestion on troubleshooting would be appreciated.

[balaji.bandi]

what DNAC version, what end device ?

is this using netconf or snmp ?

check on the end device any obnormal logs ?

[Turbo727]

2.3.5.5-70026

Catalyst 9300, 9500 and 9200

I have configured both netconf and SNMP.

not seeing any obvious error messages. the only one I saw is this:

%PKI-4-CRL_LDAP_QUERY: An attempt to retrieve the CRL from ldap:///CN=internal-CA(3),CN=SCertAuth01,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=test,DC=internal?certificateRevocationList?base?objectClass=cRLDistributionPoint using LDAP has failed

[Dan Rowe]

Can you ensure your network device(s) and CatC appliance are time synchronized? Excessive time drift between the network device(s) and CatC could be one reason why your health scores appear to be present intermittently.

[Preston Chilcote · Accepted solution]

Are you using SNMPv3?  AES256?   Until 2.3.7.4 only AES128 is supported for Assurance to work correctly.