10-16-2017 08:20 AM
I have probably ten 2.3 deployments going right now and in two of them for some reason when we disable alarms ISE continues to send out the alarms. They show up on the home screen and get emailed out. I have tried multiple times enabling/disabling the alarms to no avail. Everything looks sync'd in the deployment.
Is this a known issue in 2.3?
On the one customer, the alarms they had disabled in 2.1 are working just fine. We did a restore from 2.1 to 2.3. We disabled a few alarms after we were at 2.3 and those ones are still sending out alerts.
Solved! Go to Solution.
04-03-2023 01:25 PM
I resolved the issue a few nights ago (Unable to disable an alarm/email alert).
Unfortunately, I did two actions so I'm not sure which one fixed it.
1. Went from patch 3.1p4 to 3.1p5 (Lucky we don't use Cisco Phones)
2. Performed a manual syncup to the secondary MnT node.
- Go to Administration > System > Deployment > choose [Secondary MNT Node name] > click on Syncup.
10-16-2017 11:06 AM
This is new to me. Please work Cisco TAC to troubleshoot.
If none of the "disabled" alarms fired on the primary ISE, then likely something to do with replications.
01-18-2023 04:47 PM
Fast forward to 2023 and the problem still exists.
I am on version 3.1 patch 4
I created a new email alarm, for configuration changes to the OUI, It works okay but now i cannot disable it.
04-03-2023 01:25 PM
I resolved the issue a few nights ago (Unable to disable an alarm/email alert).
Unfortunately, I did two actions so I'm not sure which one fixed it.
1. Went from patch 3.1p4 to 3.1p5 (Lucky we don't use Cisco Phones)
2. Performed a manual syncup to the secondary MnT node.
- Go to Administration > System > Deployment > choose [Secondary MNT Node name] > click on Syncup.
02-09-2023 02:27 PM - edited 02-09-2023 02:27 PM
I am also on ISE 3.1 patch 4 and I can't send a single Alarm email. It worked for a day and then stopped. I have done TCPdump on the PAN and I can see successful SMTP to the Outlook server when I used the Test function. But I see nothing when I generate an alarm. I toggled the SMTP off and on again. I rebooted PAN. That didn't fix it.
I can't use patch 5 because that has a catastrophic bug in it that prevents Cisco phones from doing EAP-TLS (some openssl issue). Had to roll back to patch 4.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide