cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1432
Views
5
Helpful
5
Replies

Failed to integrate FMC with ISE-PIC

Bledian
Level 1
Level 1

Hello community,

While trying to integrate FMC with ISE-PIC we are getting the error below after i press TEST while creating identity source.

Primary host:

test: ISE connection.

Preparing ISE Connection objects...

Connecting to ISE server...

Beginning to connect to ISE server...

Captured Jabberwerx log:2023-05-03T13:21:04 [    INFO]:

_reconnection_thread starts

Captured Jabberwerx log:2023-05-03T13:21:04 [    INFO]: pxgrid connection init done successfully Captured Jabberwerx log:2023-05-03T13:21:04 [    INFO]: testing connecting to host 10.128.128.41 timeout=3 ...

Captured Jabberwerx log:2023-05-03T13:21:07 [   ERROR]: connection timed out while trying to test connection to

host=10.128.128.41:ip=10.128.128.41:port=5222

Captured Jabberwerx log:2023-05-03T13:21:07 [    INFO]: _on_disconnect called ...failed to connect to ISE server, with error:ISE_CONNECTION_RESULT_FAIL_CANNOT_CONNECT_HOST.  Shutting down ISEConnection.

Unable to connect to ISE server at host: '10.128.128.41'.

connectionHealthPollingThread starting.

connectionHealthPollingThread ending.

disconnecting pxgrid

Captured Jabberwerx log:2023-05-03T13:21:07 [    INFO]:

_reconnection_thread exits

Captured Jabberwerx log:2023-05-03T13:21:07 [    INFO]:

pxgrid_connection_disconnect completes

 

Would appreciate any kind of help,

 

Best regards,

 

BR.

 

2 Accepted Solutions

Accepted Solutions

Yup this is your issue.  ISE-PIC 3.1 dropped support for pxGrid 1.0 and only runs pxGrid 2.0.  FMC 6.6 only runs pxGrid 1.0.  So you need to upgrade your FMC to 6.7+ or use ISE-PIC 2.7.

https://www.cisco.com/c/en/us/products/collateral/security/firepower-ngfw/firepower-ftd-fmc-6-6x-fxos-2-8x-eol.html

View solution in original post

Thank you very much,

We will upgrade FMC tomorrow to latest version 7.3.1 and let you know if that fixed the problem.

View solution in original post

5 Replies 5

ISE-PIC version?   FMC version?  Note that only 6.7+ of FMC supports pxGrid 2.0.

Ise-pic is 3.1

Fmc 6.6

Yup this is your issue.  ISE-PIC 3.1 dropped support for pxGrid 1.0 and only runs pxGrid 2.0.  FMC 6.6 only runs pxGrid 1.0.  So you need to upgrade your FMC to 6.7+ or use ISE-PIC 2.7.

https://www.cisco.com/c/en/us/products/collateral/security/firepower-ngfw/firepower-ftd-fmc-6-6x-fxos-2-8x-eol.html

Thank you very much,

We will upgrade FMC tomorrow to latest version 7.3.1 and let you know if that fixed the problem.

Upgraded FMC to 7.0.5 , ISE-PIC 3.1, now its working 

Thanks for the help!