cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1741
Views
5
Helpful
3
Replies

Generate report of accurate current active session

sot01
Level 1
Level 1

I trying to generate report of actual active device from cisco ISE version 2.7, but the report generated is not accurate (7103 actives, I generated from Contextual Visibility --> Endpoint).

While I check on License (Administration --> License) and found that based license used only 6001.

So how we could generated the accurate active endpoint devices

1 Accepted Solution

Accepted Solutions

Arne Bier
VIP
VIP

Hello @sot01 

 

Context Visibility will collect every endpoint that has communicated with ISE. By active, you mean active RADIUS session. And that changes constantly. Therefore the best you can do is to export the entire Context Visbility and then analyse that in a spreadsheet - sort by "last active date" to get an idea of the "old stuff" that is just lying around. If for example you have a guest network, then you will accumulate a lot of endpoints that you may never see again. And MAC randomisation could also slightly inflate the numbers. e.g. if the same physical device connects to your wireless network on different SSIDs then each connection may present its own MAC address. Not to mention, same device connected by wired and by wireless - more MAC addresses.

View solution in original post

3 Replies 3

Arne Bier
VIP
VIP

Hello @sot01 

 

Context Visibility will collect every endpoint that has communicated with ISE. By active, you mean active RADIUS session. And that changes constantly. Therefore the best you can do is to export the entire Context Visbility and then analyse that in a spreadsheet - sort by "last active date" to get an idea of the "old stuff" that is just lying around. If for example you have a guest network, then you will accumulate a lot of endpoints that you may never see again. And MAC randomisation could also slightly inflate the numbers. e.g. if the same physical device connects to your wireless network on different SSIDs then each connection may present its own MAC address. Not to mention, same device connected by wired and by wireless - more MAC addresses.

Thanks you @Arne Bier, Thanks you for your suggestion.

Do we have any alternative solution beside this?

Have you tried clicking on the "Active Endpoints" dashlet on the Dashboard? That will list all the currently active sessions