cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
 
Register for the monthly ISE Webinars to learn about ISE configuration and deployment.
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

443
Views
3
Helpful
4
Replies
Beginner

ISE posture check fails

hi, we have a problem with posture failing when the PC is connected behind the cisco ip phone. The problem is like this:

the ip phone powered via PoE suddenly loses connections and turns off -> port is down. So the port on PC goes down as well.

When the phone powers up, the port on the PC goes up as well and the whole process starts -> authentication and posture check. The problem is that during the boot up process of the phone, the phone goes down again (seen on the switch and PC) but the posture is still in progress and sometimes it tries to send the result of the posture check when the port is down so the posture fails with notification Failed to contact policy server. Contact your system administrator. There is also Try again button to run the posture again. And sometimes the posture finishes successfully. Is there any way to set up some kind of backoff timer and start the posture check 15seconds after the interface goes up?

thank you

Everyone's tags (6)
1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

Re: ISE posture check fails

Discover timer values from agent side are very much hard-coded and not configurable via UI, I would recommend exploring the option of posture-lease with PRA of min values


Thanks

Imran

4 REPLIES 4
Highlighted
Cisco Employee

Re: ISE posture check fails

Discover timer values from agent side are very much hard-coded and not configurable via UI, I would recommend exploring the option of posture-lease with PRA of min values


Thanks

Imran

Beginner

Re: ISE posture check fails

Beginner

Re: ISE posture check fails

updated post with video

Cisco Employee

Re: ISE posture check fails

I would suggest you work with the tac on debugging and coming up with a solution to this

They will look at agent logs suggest fixes and open bugs where needed