Report based on TLS version used by endpoints

[dgaikwad]

Hello Experts,
I would like to extract reports based on the TLS version being used by the endpoints, as seen here:

But, was not able to locate such a filter on ISE Reporting, any pointers to the same?
Or is this something that cannot be extracted from ISE?

[Mike.Cifelli]

AKAIK there is not a direct report you can run to target that. However, you could run a report on Top N Authentication by Failure Reason, and create a rule like this: Failure reason contains TLS. This would report how many endpoints are failing auth due to TLS issues. Do you use the ise posture module? If so, you could setup a registry check to determine what your hosts are configured to use from a Windows perspective: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\RasMan\PPP\EAP\13. That key is specifically applicable to EAP TLS and PEAP. There may be some other keys you could leverage as well. Good luck & HTH!

[dgaikwad]

Yes, I did try out this way of finding out the endpoints, but this method does not provide an option to extact the report in csv format.
The report generated in graphical format only...

Any workaround to get that report extracted in csv format?