Network Setup Assistant unable to download the profile from ISE

[mfares2000]

Hi,

I configured BYOD and it's working fine with all Apple devices but i'm facing a problem with Andriod as the network setup assistant not installing the profile and the error message (unable to connect. Please manually connect to SSID:NAME).

the attched include the error message.

[Andreas di Zazzo]

Can you post your spw.log file from the android client? What Android version are you running when you face problems?

There is a problem with the out of box NAC rules and Android 5.0 for Cisco ISE 1.4.

Here is a common problem that you might have, and a fix for it. These log entries are found in spw.log

2015.06.25 13:33:41 ERROR:At line 11, column 2: mismatched tag

2015.06.25 13:33:41 ERROR:org.apache.harmony.xml.ExpatParser$ParseException: At line 11, column 2: mismatched tag

2015.06.25 13:33:41 ERROR:Null config object from parser

In order to fix this, you must update your posture database file.

Go to Administration > Settings > Posture > Updates and choose update now.

If you do not have any current licenses that allows NAC, you can go to www.cisco.com/go/license and issue evaluation ISE licenses, so you can access this feature in the ISE. After updating you can remove the eval license.

[mfares2000]

Hi,

Thank you for your support but the issue is still even after the update. i did the debug in ISE and no errors found. Please find the attached files and configuration if you have any concern. Thanks

[Andreas di Zazzo]

We need the spw.log from the phone itself that Cisco Network Setup Assistant generates, not logs from ISE.

[mfares2000]

Attached :)

[Andreas di Zazzo]

It could be this bug, https://tools.cisco.com/bugsearch/bug/CSCui42655

Can you do testing with other Android versions than 4.3 specificly to see if they work?

[Andreas di Zazzo]

https://supportforums.cisco.com/discussion/12370966/samsung-galaxy-s3-android-43-byod-enrollment-issue

related?
 

[mfares2000]

Hi,

Thank you for your support. let me check with another software versions.

[bhose]

Hi Mfars,

In your SPW.log you have the folksinging messages. Could this be your issue.

Hope this helps

2015.08.12 23:07:33 ERROR:Unable to make http connection to send Provisioned-status:

2015.08.12 23:07:33 ERROR:java.net.UnknownHostException: Unable to resolve host "IS01.fares.com": No address associated with hostname