AD Users network disconnect by ISE frequently

[anfelogo03]

Hi, 

we have an issue about AD Auth and ISE, sometime some users are disconnected constantly, We must to restart PC or Reinstall CA certificates, It doesn't happens in all users, but  in the users that it happens frequently are disconnected and unable to auth on AD

The event on ISE is 5411 Supplicant stopped responding to ISE and failure reason is 12940 Supplicant stopped responding to ISE during conducting inner EAP-MSCHAPv2 method

[Mark Elsen]

 - This issue can be subject to many parameters; such as ISE version and patch level in place. That combined with supplicant compatibility (version and ise-version-compatibility), let alone a windows versioning or patch-up-to-date (for windows) problem.

 M.

[anfelogo03]

Thanks for reply,

I would like to know where i could verify compatibility between them?.

I'm thinking that problem is caused by TLS certificate, maybe CA generation certificate. You know about TLS certificate?

Thanks

[Mark Elsen]

                                 >I would like to know where i could verify compatibility between them?.

   You will find lots of compatibility information from these page(s); scroll the documents >completely< to find os and supplicant compatibility infos.

                https://www.cisco.com/c/en/us/support/security/identity-services-engine/products-device-support-tables-list.html

  M.