ISE delete mac address itslef in ENDPOING IDENTITY GROUP

[Sheraz.Salim]

we have some wireless devices that need to be authenticate on wireless network. we have define rule in ISE but every other monring ISE itself delete the mac addresses and i have to manually add tham in could some one please help on this.

[Jatin Katyal]

What version of ISE are you running? How your endpoint purge settings looks like?

Endpoint Purge Settings

- Jatin

[Sheraz.Salim]

hi the version is 1.2.0.899

[Sheraz.Salim]

Kindly please advise what could be the cause of the issue. the mobile wifi devices working fine one day than the other day (second day) they could not connect to our network.

i was check the logs of one device which was working good yesterday but now showing as below

Event 5400 Authentication failed

Failure Reason 15039 Rejected per authorization profile

Resolution Authorization Profile with ACCESS_REJECT attribute was selected as a result of
the matching authorization rule. Check the appropriate Authorization policy rule-results.

Root cause Selected Authorization Profile contains ACCESS_REJECT attribute

help please

[Sheraz.Salim]

kindly please put some light on this as it become a big issue end points are keep dropping

[Sheraz.Salim]

there is a bug

Cisco Bug: CSCul71176 - Endpoints manually assigned to id groups might change groups randomly