cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1433
Views
0
Helpful
3
Replies

Endpoint log in ISE

interfacedy
Spotlight
Spotlight

Hi Diagram is like this PC--Switch--ISE. An internal account is created at ISE. After login, The Live logs shows like below. In Status column, one is Green and other is Blue. What is that meaning with Blue? and screenshot for PC nic is like the second picture. It shows Undentified Network, are these normal? Thank you

 

1.PNG

 

 

 

111.PNG

3 Replies 3

Amine ZAKARIA
Spotlight
Spotlight

@interfacedy ,

 

The green status means Authentication has succeeded

The blue status means the sessions has started, in other word ISE received the Accounting Start for that succeeded authentication.

There's a third status RED which means authentication failed.

 

And screenshot for PC nic is like the second picture. It shows Undentified Network, are these normal? Do you have access to the network after authentication, can you ping anything ?  

Thank you Amine! 


 Do you have access to the network after authentication, can you ping anything ?  



PC can ping anything it should. If login repeatedly, the log shows many Green status, but the Blue is only one on the top in this column. 

I guess this is relative with non domain user

@interfacedy ,

 

Each time you login you will see that green status and yes using RADIUS each authentication has the blue status (NAD telling the ISE this session has started Accounting-Start).

 

For the second question, i thought you are using AD, generally you will see example.com in domain joined machine.

 

Hope that helps.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card