Cisco ISE : 5441 Endpoint Started a New Session

[KaigeG]

We have a ISE deployment (2.7p1) that has been generating thousands of 5441 errors a week for endpoints across our network. They range from happening minutes to milliseconds apart from each other and appear to have no correlation to each other location wise (each instance happening on different Network Devices when they occur.

A full error reads as:

Endpoint Id: XX::XX Username: Radius Username: Network Device Name: Access Type: Location: NAS IP:

5441 Endpoint started new session while the packet of previous session is being processed. Dropping new session.

1

Endpoint started new session while the packet of previous session is being processedVerify known NAD or supplicant issues and published bugs. Verify NAD and supplicant configuration.

Are there any applicable known bugs or remedies to this issue?

Thank you.

[Marcelo Morais · Accepted solution]

Hi @KaigeG ,

 please take a look at BRKSEC-3383 Troubleshooting ISE, special attention to pg. 10 802.1x Endpoint Abandoned EAP Session.

Hope this helps !!!

[KaigeG]

Thanks so much for the reply. A lot of helpful info in the slides. Appreciate it!

[vrdfarzan]

page not found