cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

2208
Views
6
Helpful
5
Replies
Highlighted
Rising star

Client Authenticating Incorrectly in ISE 2.4

We just upgraded to ISE 2.4 from 2.3.  A client computer is authenticating with computer credentials.  It shows up as USERNAME/USERNAME.  The authentication fails.

I thought I would share this to see if anyone is having the same issue. I also have a TAC case open so I can provide an update from there as well.

Thanks,

Alex

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

ISE 2.4 is masking out invalid usernames. To see them, please use the option [ ] Disclose invalid usernames.

Screen Shot 2018-05-21 at 4.36.08 PM.png

View solution in original post

5 REPLIES 5
Highlighted
Cisco Employee

ISE 2.4 is masking out invalid usernames. To see them, please use the option [ ] Disclose invalid usernames.

Screen Shot 2018-05-21 at 4.36.08 PM.png

View solution in original post

Highlighted

Is this something that is usually corrected with Identity Rewrite, driver issue, etc.?

Highlighted

I believe the reason we are suppressing such user names is that the end users accidentally put their passwords as the usernames some times.

CSCvh91118 is an enhancement filed during ISE 2.4 beta to make the option more flexible. I just added the release notes enclosure so it would take a couple of days of Cisco internal review before becoming external visible.

Highlighted

In this case, it would be a host. Can you comment on host authentications?

Highlighted

Please use the option to disclose the real host subject for 30 minutes and then update ISE configurations accordingly.