Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We have ISE 2.7 with patch4.Some endpoints are defined by ISE as "AnomalousBehaviour true"But I don't understand why ISE triggered for these endpoints.I found this via the show logging application profiler.log Endpoint LastActivity is null/empty. Upd...
Thank for your reply!But I could not find change for these AttrName in the profiler.logI found:Significant attribute change detected, persisting EP: D0:BF:9C:33:05:0B:D0:BF:9C:33:05:0B:c675b270-154d-11ec-a66d-02422d8e8bc0::- Endpoint LastActivity is ...