View Blacklisted Endpoints by Client Suppression Feature

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-24-2018 01:18 PM - edited 07-24-2018 01:20 PM
We have enabled anomalous client suppression with Reject RADIUS requests from clients with repeated failures checked.
Is it possible to view the blacklisted endpoints on ISE due to repeated client failures ?
- Labels:
-
Identity Services Engine (ISE)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-24-2018 02:50 PM
On the ISE Home Page, you will see a counter for "Rejected Endpoints". You can click on this to bring up list, or view Rejected endpoints in Context Visibility and have option to choose all or specific endpoints and "Release Rejected".

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-25-2018 07:29 AM
Thanks Craig
Which ISE versions are these features supported from ?
Also the API support where we can release rejected endpoints
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-25-2018 08:17 AM
In ISE 2.2 we display and allow release of suppression-Rejected Endpoints. API also added in 2.2. See BRKSEC-3699 (reference version) from CiscoLive Orlando 2018 (available on CiscoLive.com) for more info with screen shots. Search on "Visibility into Rejected Endpoints"
Example ERS API:
