ISE 2.3 - Temporal agent issue

[dhanushka_]

HI 

We are working with ISE 2.3 and Posture to guest clients using cisco temporal agent, but when we download and run the temporal agent we got the following error "Failed to contact policy server"

Does anybody know how to resolve this issue ?

Thanks

[Nidhi]

make sure you have appropriate dACL configured for the PSNs to be discovered. you can go through this link - Link 

Also please work with TAC to troubleshoot this issue further.

Thanks,

Nidhi

[dhanushka_]

HI Nidhi,

Thanks for your reply.

[dhanushka_ · Accepted solution]

HI

I have able to found a solution for this issue.

This Failed to contact policy server error got because of the DNS error. If temporal agent could not able to resolve FQDN as defined for G0 on ISE primary server this error occurred.

FQDN (“hostname” and “ip domain-name”) of the ISE admin server itself must be added as a DNS entry.

[Jason Kunst]

Great! Yes all your ISE Nodes should be resolvable via DNS forward and reverse lookups for proper functionality