We have ISE 2.7 with patch4.Some endpoints are defined by ISE as "AnomalousBehaviour true"But I don't understand why ISE triggered for these endpoints.I found this via the show logging application profiler.log Endpoint LastActivity is null/empty. Upd...