Cisco ISE 1.2 Patch 17 is not working with Windows XP

[newbieguy]

Hello Everyone

I had upgrade ISE 1.2.0.899 Patch 8 to 17, NAC Agent is not popup when logon Windows XP. I try..

 1. disable ssl 2.0,3.0 and enable TLS1.0

 2. install NAC Agent 4.9.0.53 and 4.9.0.51

it not work, but everything is find on patch 8.   

Please suggest me to find out solution. Thank you

[Jatin Katyal]

Can you test with NAC agent 4.9.4.3 Windows XP support with NAC agent.

~ Jatin

[newbieguy]

Thank you Jatin Katyal

I install agent 4.9.4.3 but It is not working.

[Jatin Katyal]

can you upload the NAC agent logs from the windows xp machine ?

[newbieguy]

Dear Jatin Katyal

2016-01-06 09:08:58.113 +07:00 0001444522 60079 NOTICE Administrator-Login: A failure to establish an SSL session was detected, ConfigVersionId=4, AdminIPAddress=192.168.120.12, OperationMessageText=Client requested protocol SSLv3 not enabled or not supported, PortNumber=8905,

2016-01-06 09:08:58.115 +07:00 0001444523 60079 NOTICE Administrator-Login: A failure to establish an SSL session was detected, ConfigVersionId=4, AdminIPAddress=192.168.120.12, OperationMessageText=Remote host closed connection during handshake, PortNumber=8905,

from "Client requested protocol SSLv3 not enabled or not supported"  do you think because after patch 17 ise node is not support ssl cipher or tls 1.0 ? (window 7 client support tls 1.1,1.2 so we not found any problem.)

Thank you