ISE endpoint exclusion?

[Josh Morris]

Is there something in ISE that will exclude a device if it fails auth so many times? I have a wireless endpoint that has failed numerous times to the point where I no longer see it in the live log. I do see the association attempt in the WLC, but it shows an Access-Reject from AAA. I do not have client exclusion set on the WLC. Thanks. 

[andrewswanson · Accepted solution]

Hi
Yes - see Administration > System > Settings > Protocols > RADIUS. There is an option for Suppress Repeated Failed clients which is enabled by default (if I remember correctly)

hth
andy