06-12-2022 04:41 PM
Hello,
How long does it take for an ISE deployment to update the Profiler POLICIES after the Offline Manual Update has been applied?
I have an air-gapped ISE 3.0 deployment and I wanted to update the deployment with MAC OUI and Policies, but in two separate steps to keep an eye on the deltas/changes that result.
First, I created the MAC OUI Package and applied it- it updated a lot of MAC OUIs. Success.
A week later I generated the Full Package (MAC OUI and Policies) - applied - a few OUI's updated, but none of the Policies were updated. From what I can tell, and ISE 3.0 system should have 678 Cisco Provided policies. My air-gapped system only has 512 - so it's in dire need of an update.
I can't see any CPU load on any nodes since applying the update. I have applied this to a pre-production lab which has hardly any endpoints or activity.
Just curious how long this takes in general? Do I need to restart services on the PAN?
regards
Arne
06-13-2022 02:47 AM
06-13-2022 09:14 PM
After 24 hours there has been no change to the Profiling Policies. I checked the Reports > Audit > Operations Audit Reports as well as the Profiler Policies.
Stopping PAN processes and rebooting didn't fix it either. I will open a TAC case.
I have never had issues with the automatic profiler feed updates from tools.cisco.com - perhaps there is an issue with the offline bundle that's generated. I noticed that the file size of the bundle that only contains MAC OUI is larger than the full bundle (containing MAC OUI and Policies). Since these files are PGP encrypted we can't look inside
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide