cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
679
Views
10
Helpful
3
Replies

Cisco ISE 3.1 is communcating with unknown Internet IP addresses

My Cisco ISE 3.1 patch 3 is attempting to communicate with these IP addresses over the Internet but my Internal firewalls is blocking it. We only allow the ISE appliance to communicate with tools.cisco.com and tools2.cisco.com over https for Smart Licensing. 

 

These appears to be AWS Internet IP addresses:

 

$ dig @4.2.2.2 -x 35.162.38.159 +short
ec2-35-162-38-159.us-west-2.compute.amazonaws.com.
$ dig @4.2.2.2 -x 35.165.225.238 +short
ec2-35-165-225-238.us-west-2.compute.amazonaws.com.
$ dig @4.2.2.2 -x 52.26.193.222 +short
ec2-52-26-193-222.us-west-2.compute.amazonaws.com.

 

What are those IP addresses for?  Anyone?

 

3 Replies 3

My guess would be for interactive help:

*.walkme.com *.walkmeusercontent.com

I found the issue.  The stupid ISE is attempting to communicate with cisco connectDNA:

 

dig @4.2.2.2 www.ciscoconnectdna.com +short
www.tesseractcloud.com.
maglev.production-dnaservices-2.tesseractcloud.com.
35.162.38.159
52.26.193.222
35.165.225.238

Arne Bier
VIP
VIP

If you find an option to disable this, please let us know.