ISE: Unable to reach local AD controller

[jds5]

Hello,

We encounter a problem when the WAN link is cut between the remote site and the Datacenters.

However, we have a domain controller server on the remote site which is not taken into account during these cuts.

Is it possible to prioritize the call to domain controllers and how to be sure the local domain controller responds correctly?

Our virtual ISE is in version 2.7.0.356

BR,

[ahollifield · Accepted solution]

A properly configured AD sites and services should resolve this issue; so this is really an AD issue, not an ISE issue.  

Secondly, install the latest patch of ISE 2.7.

Thirdly: https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/bulletin-c25-2943876.html