Active Directory Diagnostic Tool Scheduled Run - ISE 2.7 Patch 10

[JScebbz]

Is there a suggested frequency to run the AD diagnostic tool tests? Our tests are set to run every hour. We are thinking of extending the increments to every couple of hours or longer. Thanks!  

[ahollifield]

I'm not sure of any specific guidance on the interval.  What is making you want to change the interval though?

Also: https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/bulletin-c25-2943876.html

[JScebbz]

We are getting a ton of alerts for the DNS SRV record query test. Supposedly this is a known issue with ISE with AD environments that have a large number of DCs. We changed it to 1 day to cut back on the noise. 

[hslai]

@JScebbz You may change it to run less frequently as you see fit. CSCvw81130 is a known issue so that we are unable to disable the scheduled tests. It has been addressed in ISE 3.1 Patch 8, 3.2 Patch 4, and 3.3 Patch 1 but not in ISE 2.7.