cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

293
Views
0
Helpful
3
Replies
Highlighted
Beginner

Viewing the attributes which send to Cisco ISE

Hey

Is there a way to view in the attributes (AD group, certificate name) which are transmitted to the Cisco ISE? I want to check which attribute does not match for a host.

Marco

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Beginner

Viewing the attributes which send to Cisco ISE

Hello Marco,

You can run the reports on endpoint profiling from the following location:

Operations > Reports > Catalog > Endpoint.

The following are the standard reports for endpoint profiling:

•Endpoint_MAC_Authentication_Summary—A report that lets you view the RADIUS authentication summary information for a particular MAC/MAB along with a graphical representation for a selected time period.

•Endpoint_Profiler_Summary—A report that lets you view the profiler summary information for a particular MAC address for a selected time period.

•Endpoint_Time_To_Profile—A report that lets you view the time to profile information for a particular MAC address for a selected time period.

•Top_N_Authentications_By_Endpoint_Calling_Station_ID—A report that lets you view the top N passed/failed/total authentications count for RADIUS protocol with respect to an endpoint calling station ID for a selected time period.

•Top_N_Authentications_By_Machine—A report that lets you view the top N passed/failed/total authentications count for RADIUS protocol with respect to machine information for a selected time period.

Also  check the following links for reference,

http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_prof_pol.html#wp1340624

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_mnt.html

View solution in original post

3 REPLIES 3
Highlighted
Beginner

Viewing the attributes which send to Cisco ISE

Hello Marco,

You can run the reports on endpoint profiling from the following location:

Operations > Reports > Catalog > Endpoint.

The following are the standard reports for endpoint profiling:

•Endpoint_MAC_Authentication_Summary—A report that lets you view the RADIUS authentication summary information for a particular MAC/MAB along with a graphical representation for a selected time period.

•Endpoint_Profiler_Summary—A report that lets you view the profiler summary information for a particular MAC address for a selected time period.

•Endpoint_Time_To_Profile—A report that lets you view the time to profile information for a particular MAC address for a selected time period.

•Top_N_Authentications_By_Endpoint_Calling_Station_ID—A report that lets you view the top N passed/failed/total authentications count for RADIUS protocol with respect to an endpoint calling station ID for a selected time period.

•Top_N_Authentications_By_Machine—A report that lets you view the top N passed/failed/total authentications count for RADIUS protocol with respect to machine information for a selected time period.

Also  check the following links for reference,

http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_prof_pol.html#wp1340624

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_mnt.html

View solution in original post

Beginner

Viewing the attributes which send to Cisco ISE

Thanks for answer.

Highlighted
Participant

Viewing the attributes which send to Cisco ISE

The RADIUS_Accounting report has  enhanced options to run the report for intervals of less than an hour.  The Run button provides a list of short intervals starting with a  minimum of a minute. This allows you to view accounting records at short  intervals that are less than an hour so that you can view a fewer  number of records depending on the interval.

You  can choose the Query and Run option to run the RADIUS_Accounting report  for every minute past and thereafter at other intervals including the  past 5 minutes, 15 minutes, 30 minutes, one hour and so on. When you  choose to run the report by using the Query and Run option from the Run  button, you can view the RADIUS_Accounting > Query and Run page. This page displays the Time Range field, where you can choose  intervals in minutes for time ranges that are less than an hour.

For More Information, please visit  the:

http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_prof_pol.html#wp1401335