ISE-PIC agent (403) Forbidden.

[ipagliani]

Ciao,

I'm testing the Passive-ID with ISE-PIC agent in my lab. However I've this error in CiscoISEPICAgent.log:

The remote server returned an error: (403) Forbidden.
2017-11-02 10:27:19,188 ERROR - Configuration , Recieved empty config

The nodes file is correct with ISE address:

https://ISE_FQDN:9095

If I try to access with a browser the same error occurs.

The configurations steps were:

• Enable Passive Identity Service on node is enabled;
• Deploy of the Agent form ISE (Installed);
• PassiveID Domain Controllers added and associated to Agent;
• The AD credential used is Administrator;

Thanks

[bobsills · Accepted solution]

I have seen this problem.  For me it occurred when the 'Host FQDN' under PassiveID->Providers->Agent did not match the reverse DNS entry for the host the agent was installed on. 

Hope that helps.