2nd try -ISE Endpoint abandoned EAP session

[nadeekha]

Hi Experts,

My customer is in the test/pilot phase with ISE 2.0. The Windows 7 endpoints are authenticating as expected. There are several messages in the log with the below error numbers

5440 Endpoint abandoned EAP session and started new

5436 RADIUS PACKET ALREADY IN THE PROCESS

Would appreciate it if some can give me an idea why these messages are showing up in the logs when all appears to be fine with the users successfully authentication as per the policy.

Thanks in advance

Nadeem

[gbekmezi-DD · Accepted solution]

Hi Nadeem. These really are common/generic messages. An endpoint may have made multiple attempts before actually connecting. Is this a wired or wireless use case? One thing to look at is authentication latency and dot1x/EAP timeouts on endpoints.