cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

508
Views
0
Helpful
1
Replies
Ahmad Murad
Beginner

ISE 1.4 Client Provisioning Issue

Hi,

I'm deploying ISE for wired and wireless infrastructure using the software version 1.4. (it was 1.3 Patch 2 and I upgraded it to 1.4).

Once we upgrade the deployment (2 nodes), we are facing issues with client provisioning and NAC agent pop-up on Windows 7/8/8.1

The problem is like the following:

1. Windows machine authentication using MAR.

2. User authentication against the AD.

3. If you open the browser, you will be redirected to the client provisioning portal to install the NAC agent.

4. You click on the "start" button to start the process, but after that you get an error "Contact your help desk for assistance".

5. The operations tab shows that everything sent to the SW correctly, and even the session is OK.

6. Sometimes it works, and we can download and install the NAC agent (4.9.5.7) and it will pop-up and check the PC.

7. If we restart this PC, the problem happens again and we stick again on the same loop.

8. The client provisioning report shows that this username/MAC address fails because of the following reason:

Error while trying to determine access privileges: No matching SPW profile found

9. The weird thing that it may work after multiple tests without any changes on the ISE/SW/PC, and the same report shows the correct CPP match.

10. The deployment was working fine and tested multiple times using software 1.3 Patch 2, and we are facing this issue after the upgrade to 1.4.

 

Any idea or similar case about this behavior?

1 REPLY 1
Venkatesh Attuluri
Cisco Employee

did you create a Client Provisioning policy for this particular machine type or OS for which you are facing issue

Create
Recognize Your Peers
Content for Community-Ad

ISE Webinars



Did you miss a previous ISE webinar?

CiscoISE YouTube Channel