Hi all,
I'm wondering if there is a way to turn off failed authorization logging in ISE? When someone leaves open a stale ASDM session our logs become flooded with failed Auth attempts. I'm guessing this is because the ASDM is trying to keep the rule base fresh with a variety of "show" commands but these are failing due to an expired session.
The logs could be filtered out on the logging server but if there's a way to turn them off within ISE that would be more helpful. Authorization isn't something we're too fussy around.
Thanks,
Josh