cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
706
Views
0
Helpful
1
Replies

ISE 1.4 Client Provisioning Issue

Ahmad Murad
Level 1
Level 1

Hi,

I'm deploying ISE for wired and wireless infrastructure using the software version 1.4. (it was 1.3 Patch 2 and I upgraded it to 1.4).

Once we upgrade the deployment (2 nodes), we are facing issues with client provisioning and NAC agent pop-up on Windows 7/8/8.1

The problem is like the following:

1. Windows machine authentication using MAR.

2. User authentication against the AD.

3. If you open the browser, you will be redirected to the client provisioning portal to install the NAC agent.

4. You click on the "start" button to start the process, but after that you get an error "Contact your help desk for assistance".

5. The operations tab shows that everything sent to the SW correctly, and even the session is OK.

6. Sometimes it works, and we can download and install the NAC agent (4.9.5.7) and it will pop-up and check the PC.

7. If we restart this PC, the problem happens again and we stick again on the same loop.

8. The client provisioning report shows that this username/MAC address fails because of the following reason:

Error while trying to determine access privileges: No matching SPW profile found

9. The weird thing that it may work after multiple tests without any changes on the ISE/SW/PC, and the same report shows the correct CPP match.

10. The deployment was working fine and tested multiple times using software 1.3 Patch 2, and we are facing this issue after the upgrade to 1.4.

 

Any idea or similar case about this behavior?

1 Reply 1

Venkatesh Attuluri
Cisco Employee
Cisco Employee

did you create a Client Provisioning policy for this particular machine type or OS for which you are facing issue