ISE MAR cache lost on restart of server

[dan.letkeman]

Hello, 

I have found that when you restart the ISE server the MAR cache is lost.  Is there a way to keep this cache in tact when restarting the services / server?

People that leave their machine on over the weekend when we do the service on the system lose connection due to the fact that the policy will not allow the users back in because the machine authentication cache is lost.  The only solution is to reboot the workstation/laptop

Dan.

[Rob Ingram]

What version of ISE are you running?

In ISE 2.3 it looks like - ISE reads the MAR cache entries from the file on its local disk based on the cache entry time to live when the Cisco ISE application services get restarted. When the application services of a Cisco ISE instance come up after a restart, Cisco ISE compares the current time of that instance with the MAR cache entry time. If the difference between the current time and the MAR entry time is greater than the MAR cache entry time to live, then Cisco ISE does not retrieve that entry from disk. Otherwise, Cisco ISE retrieves that MAR cache entry and updates its MAR cache entry time to live.   

[dan.letkeman]

I'm running 2.2 patch 5 and it looks like it is supposed to have that feature as well.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01101.html#id_18879

However, it seems that when you install a patch on the server it does not save these too a file.  It appears that a patch constitutes an "accidental" restart of the server and not a "manual" shutdown of the services.

I guess I will open a tac case.

Dan.

[dan.letkeman · Accepted solution]

If you read the details in the documentation, the MAR cache is only saved if you manually shutdown the services.  When installing a patch the server is rebooted automatically which in turn deletes the MAR cache.

I have put in a feature request as this should be saved during a patch of the server.

Dan.