09-03-2013 12:16 AM - edited 03-10-2019 08:51 PM
Hey
Is there a way to view in the attributes (AD group, certificate name) which are transmitted to the Cisco ISE? I want to check which attribute does not match for a host.
Marco
Solved! Go to Solution.
09-03-2013 08:58 AM
Hello Marco,
You can run the reports on endpoint profiling from the following location:
Operations > Reports > Catalog > Endpoint.
The following are the standard reports for endpoint profiling:
•Endpoint_MAC_Authentication_Summary—A report that lets you view the RADIUS authentication summary information for a particular MAC/MAB along with a graphical representation for a selected time period.
•Endpoint_Profiler_Summary—A report that lets you view the profiler summary information for a particular MAC address for a selected time period.
•Endpoint_Time_To_Profile—A report that lets you view the time to profile information for a particular MAC address for a selected time period.
•Top_N_Authentications_By_Endpoint_Calling_Station_ID—A report that lets you view the top N passed/failed/total authentications count for RADIUS protocol with respect to an endpoint calling station ID for a selected time period.
•Top_N_Authentications_By_Machine—A report that lets you view the top N passed/failed/total authentications count for RADIUS protocol with respect to machine information for a selected time period.
Also check the following links for reference,
http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_prof_pol.html#wp1340624
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_mnt.html
09-03-2013 08:58 AM
Hello Marco,
You can run the reports on endpoint profiling from the following location:
Operations > Reports > Catalog > Endpoint.
The following are the standard reports for endpoint profiling:
•Endpoint_MAC_Authentication_Summary—A report that lets you view the RADIUS authentication summary information for a particular MAC/MAB along with a graphical representation for a selected time period.
•Endpoint_Profiler_Summary—A report that lets you view the profiler summary information for a particular MAC address for a selected time period.
•Endpoint_Time_To_Profile—A report that lets you view the time to profile information for a particular MAC address for a selected time period.
•Top_N_Authentications_By_Endpoint_Calling_Station_ID—A report that lets you view the top N passed/failed/total authentications count for RADIUS protocol with respect to an endpoint calling station ID for a selected time period.
•Top_N_Authentications_By_Machine—A report that lets you view the top N passed/failed/total authentications count for RADIUS protocol with respect to machine information for a selected time period.
Also check the following links for reference,
http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_prof_pol.html#wp1340624
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_mnt.html
09-04-2013 02:53 AM
Thanks for answer.
09-04-2013 07:33 AM
The RADIUS_Accounting report has enhanced options to run the report for intervals of less than an hour. The Run button provides a list of short intervals starting with a minimum of a minute. This allows you to view accounting records at short intervals that are less than an hour so that you can view a fewer number of records depending on the interval.
You can choose the Query and Run option to run the RADIUS_Accounting report for every minute past and thereafter at other intervals including the past 5 minutes, 15 minutes, 30 minutes, one hour and so on. When you choose to run the report by using the Query and Run option from the Run button, you can view the RADIUS_Accounting > Query and Run page. This page displays the Time Range field, where you can choose intervals in minutes for time ranges that are less than an hour.
For More Information, please visit the:
http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_prof_pol.html#wp1401335
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide