Hi,If you are using ISE, you can use the attribute below in your authorization profile:Network Access:WasMachineAuthenticated ==True 

I have installed Cisco ISE 3.2 Patch 7 on my production env last weekend, so far so good.

I had the same issue, called tac and this how we fix it:  Its possible you are experiencing the following defect: https://cdetsng.cisco.com/summary/#/defect/CSCwa89534 Please perform the following workaround on the FMC cli and let me know if this res...

Hi,  Changing the clock will break AD as an external identity source if ISE is configured that way and will go out of sync. It happened to me.

I'll take that back, after trying multiple times it's working now.