Showing results for 
Search instead for 
Did you mean: 
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.


Cisco NAC Agent pop up


We are running Cisco ISE 1.2 with patch 6 and NAC Agent

The Switch where the IP Phones  --> connected to PC is 4506E with latest Update, 03.05.02   15.2 E2.

The NAC Agent pop up is Intermittent. The first time it does not pop up and gets stuck in Posture Remediation on the Switch.

The Redirection is also Intermittent.


When we unplug the cable and bounce the switch port the NAC Agent pops up once.

When we restart the PC, the NAC Agent won't pop up again.

The Discovery Host is set on ISE but the same Discovery Host cannot be seen on the Cisco NAC Agent Properties dialog box.


The same Cisco NAC Agent works fine with other Switches


Any suggestions are highly welcome.


Ram kumar




Hello Ram,

For L2 or L3 deployments, the Agent will pop up on the client if "Popup Login Window" is enabled on the Agent and the Agent detects it is behind the Clean Access Server. If the Agent does not pop up, this indicates it cannot reach the CAS.

To Troubleshoot L2 Deployments:

1. Make sure the client machine can get a correct IP address. Open a command tool (Start > Run > cmd) and type ipfconfig or ipconfig /all to check the client IP address information.

2. If necessary, type ipconfig /release, then ipconfig /renew to reset the DHCP lease for the client.

To Troubleshoot L3 Deployments:

1. Check whether the Discovery Host field is set to the IP address of the CAM itself under Device Management > Clean Access > Clean Access Agent > Installation | Discovery Host. This field must be the address of a device on the trusted side and cannot be the address of the CAS.

2. Uninstall the Agent from the client machine.

3. Change the Discovery Host field to the IP address of the CAM and click Update.

4. Reboot the CAS.

5. Re-download and re-install the Agent on the client.

For more information, please go through the following link:


Content for Community-Ad