cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
359
Views
0
Helpful
1
Replies

Cisco Active sessions not matching radius accounting syslogs numbers

ajc
Level 7
Level 7

We are currently testing Palo Alto FW user-id feature which is collecting data from our ISE deployment via Radius Accounting syslogs. Interestingly, the PA FW is reporting 90-95K user-id information BUT our active sessions in the dashboard and API call is reporting over 130K. Wondering what is the difference between both, I could not find much information from my research. thanks

1 Reply 1

Torbjørn
VIP
VIP

I don't think it's possible to get to a conclusive answer without inspecting the data more thoroughly. My first hunch is that this might mean that some users might have multiple sessions?

Happy to help! Please mark as helpful/solution if applicable.
Get in touch: https://torbjorn.dev