ISE Messaging service

[jan.murin]

Hello everyone,

We had a problem with our ISE that didn't respond to any RADIUS and TACACS requests. The TAC case was resolved by disabling the option "Use "ISE Messaging Service" for UDP Syslogs delivery to MnT".

As this option is turned on by default on ISE 2.6 patch 2 onwards I am really curious what exactly is the ISE Messaging Service purpose?

In the documentation, there are just some basics, but I didn't find what is the purpose of this service and why the behaviour was changed.

Thanks in advance.

[Greg Gibbs · Accepted solution]

ISE 2.6 introduces an option for using lightweight RabbitMQ transport for Secure Syslog with some built-in WAN Survivability features. Have a look at the following Cisco Live presentation for more info:

Cisco Live 2019 San Diego: Advanced ISE Architect, Design and Scale ISE for your production networks 

Here's a screenshot from one of the slides:

Cheers,

Greg

[mbrustman]

Can you provide more information on the warning about enabling for Larger Systems requires system hardening before being allowed? We are running 3.3

[Marcelo Morais]

Hi @mbrustman ,

 please take a look at ISE - Queue Link Error, search for ISE Messaging Settings.

Hope this helps !!!