Endpoint MAC address not shown in Endpoint Classification but it exist

[rezaalikhani]

Hi all;

I have a strange case in my ISE demo lab. I have an endpoint with "F0:BF:97:5B:0F:B4" MAC address. The switch that is connected to that endpoint is configured to use MAB method. Everything is OK and the endpoint is profiled using "Windows10-Workstation", as you can see below:

The problem is that, when I search for the endpoint in Endpoint Classification section, nothing related to the endpoint shown:

Now I want to import that endpoint using import functionality in the "Endpoint Classification" section. But:

I am using ISE 3.1 Patch6 in my lab...

Any ideas?

Thanks

[Nancy Saini · Accepted solution]

Seems like the context visibility page is not in sync with the database. Are you able to view any endpoint on the context visibility? Also, check if PAN is able to resolve forward and reverse nslookup.

[Arne Bier]

As Nancy suggested, try to find that endpoint via the Menu  "Context Visibility > Endpoints" directly, since it seems the screenshot you have provided has an additional filter applied ("Anomalous Behavior")

[DigiDen]

Interestingly, I also have this issue, I cannot see the endpoint in either, "Endpoint Classification" or "Context Visibility - Endpoint"  If it is a sync issue with the database, what would the solution be? 

[Greg Gibbs · Accepted solution]

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-23/213610-ise-2-3-rest-sync-context-visibility.html

[thiru.vel10]

Make sure sw interface configured with do1q / NAC . After they search from endpoint visible context search tab . 

worked for me