cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
341
Views
0
Helpful
3
Replies

Messaging Quick Link Error after applying hot patch

Have 3 nodes running v3.2 Patch 7

1 node in Azure

2 nodes physical devices

Applied this hotpatch to the Azure node

Cisco Identity Services Engine on Cloud Platforms Static Credential Vulnerability

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-aws-static-cred-FPMjUcm7

Now I am getting an alert Quick Link Error/Messaging Service Cause={auth_failure;"access_refused - Login Was Refused Using Authentication Mechanism Plain. For Details See The Broker Logfile

This onl;y happened after the hot patch was installed, as far as I am aware as the advisory is related to cloud hosted Azure nodes, I dont need to install it on the other 2 physical nodes.

I have checked and all services are running within ISE

Anyone else seen this error after applying the hot patch.

3 Replies 3

marce1000
Hall of Fame
Hall of Fame

 

  - @Abdulaziz Loonat  When that happens ; check outputs from :
                                                                           show logging system ade/ADE.log
                                                                                      show logging application ise-messaging/ise-messaging.log

  M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

I have checked the logs and error relates to authentication

RabbitMQ System Event: user.authentication.failure

The issue only occured after I applied the hot patch to resolve the vulnerability

I have also checked and confirmed all ports are listening for the Message Link Queue

 

 - @Abdulaziz Loonat   This looks to be an internal issue : for  instance  this can happen if the credentials are  outdated, or if the user does not have the necessary permissions to access the RabbitMQ server. 
                           Basic action : contact TAC ,  provide all info's and or the troubleshooting (logs) that you did  already

  M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '