Endpoint authentication problem was fixed log messages

[darin.marais]

In our clients environment we are using an external AD to authenticate wireless clients from a 1.2.1 ISE server;

On a number of occasions some of our clients have been unable to login to the wireless network but later on it seams to resolve.

Upon checking the logs of the ISE, we have seen that when the client is again able to logon, immediately after the logon, we have the message "Endpoint authentication problem was fixed"in the ISE logs

Is there anybody on this forum that would be able to explain little bit more apart while we are receiving this message?

Many thanks in advance.

[Kanwaljeet Singh]

Hi Darin,

The "5238 Endpoint authentication problem was fixed" message comes back when a client gets removed from suppression, because the client starts to authenticate again. You can disable suppression and you would see a different message saying "5434 Endpoint conducted several failed
authentications of the same scenario"

If you disable suppression, you could be increasing the load across the deployment by not identifying mis-configured clients that keep authenticating over and over with a problem.

If the issue is consistent, we should look why the user is failing authentication by taking debugs etc.

Regards,

Kanwal

Note: Please mark answers if they are helpful.