What will be the impact if Cisco ISE is not working or down ?

[Network_Sarovani]

Hello Team ,

what happens if the CISCO ISE is non functional ? What happens to the end device authentication?

[marce1000]

 - The idea of ISE is to provide network authentication , if down then devices will not be able to go on the network.

 M.

[Network_Sarovani]

It means devices which uses ISE for authentication will not work ..

Example : PC which is connected to L2 switch on which NAC is enabled on the port will not be functional ..Meaning user will not be able to communicate with other devices .

[balaji.bandi]

If you distributed environment, they fall back to other ISE, of not Device Authentication fail back to Local account ( device authentication i take this as device admin) - not end device right ?

[Network_Sarovani]

End device = PC wired/wireless ,printer, network switches etc 

[Rob Ingram · Accepted solution]

@Network_Sarovani I assume you are referring to 802.1x RADIUS authentication?

It depends what you have configured. Use the Inaccessible Authentication Bypass (IAB) feature, also referred to as critical authentication. When configured the switch grants temporary network access to the host and puts the port in critical-authentication state, which allows devices connecting to the network whilst the RADIUS servers are down to gain network access.

https://community.cisco.com/t5/security-documents/ise-secure-wired-access-prescriptive-deployment-guide/ta-p/3641515#toc-hId-1018207729