Have a case with TAC that is over 2 months old dealing with Historical Reporting data not present after Nov 15th.  As of now the engineer has recommend a rebuild of the HA Node and restore from backup.  I have performed the rebuild without issue but am struggling with the restore.   Rebuilt Server on Wednesday 12/12/19, attempted to restore shortly after and received multiple errors concerning master agent and sftp resource availability.  Sent an email to TAC to determine what could be the issue...the scheduled DRS task ran later and completed a backup of the primary and now rebuilt secondary servers, I have since copied out the "good" backup of the failed server as to not overwrite it.  I have also stopped the backup task for now.  Since the backup task was successful, I would expect that certificates are good, and access to the sftp server is fine. Documentation is not very clear, and I have question TAC on this, but what node gui should the restore wizard be ran from, the engineer responded the master...when I attempt to do this I see it hitting the sftp server with the following messages: Feb 15 00:20:28 bk0084Repos sshd[1188]: Accepted password for ucsrepos from 10.15.225.134 port 45055 ssh2 Feb 15 00:20:28 bk0084Repos sshd[1188]: pam_unix(sshd:session): session opened for user ucsrepos by (uid=0) Feb 15 00:20:28 bk0084Repos sshd[1192]: subsystem request for sftp Feb 15 00:20:28 bk0084Repos sshd[1193]: session opened for local user ucsrepos from [10.15.225.134] Feb 15 00:20:28 bk0084Repos sshd[1193]: open "/home/ucsrepos/UCCX/2019-02-12-22-02-01_BK0084CCX1_processnode.xml" flags READ mode 0666 Feb 15 00:20:28 bk0084Repos sshd[1193]: close "/home/ucsrepos/UCCX/2019-02-12-22-02-01_BK0084CCX1_processnode.xml" bytes read 334 written 0 Feb 15 00:20:28 bk0084Repos sshd[1193]: session closed for local user ucsrepos from [10.15.225.134]   then it goes to the next backup file: Feb 15 00:21:09 bk0084Repos sshd[1205]: session opened for local user ucsrepos from [10.15.225.134] Feb 15 00:21:09 bk0084Repos sshd[1205]: open "/home/ucsrepos/UCCX/2019-02-13-22-02-01_BK0084CCX1_processnode.xml" flags READ mode 0666 Feb 15 00:21:09 bk0084Repos sshd[1205]: close "/home/ucsrepos/UCCX/2019-02-13-22-02-01_BK0084CCX1_processnode.xml" bytes read 334 written 0 Feb 15 00:21:09 bk0084Repos sshd[1205]: session closed for local user ucsrepos from [10.15.225.134] Feb 15 00:21:09 bk0084Repos sshd[1200]: pam_unix(sshd:session): session closed for user ucsrepos   I am really struggling this and am most likely going to request a requeue of the case, but didn't know if someone might have some insight to the problem...   Server was build identically to the original...same name/IP DNS....   Thanks,   Joe     ... View more

We are in the process of refreshing M3 Blades with M5 at 2 different locations.  The first location had 2 B200 M3 blades in a ESXi Cluster, we were able to replace the first blade with a M5 and attach the original M3 service profile and bring the bade into service within Vcenter.  All VM's were then migrated from the M3 to the M5 using Sandy Bridge EVC.  Then the other M3 blade was replaced, vm's separated between the 2 servers without issue.   Second site had 2 M3 blades and only 1 of them (off the books) is being replaced with a M5 blade.  Did the same process, moved all vm's M3, replaced the M3 with M5 and assigned service profile.  Vcenter will not allow for the migration of vm's to the M5 due to incompatibility.  Vcenter will not allow for the selection of EVC Sandy bridge as it states it is not compatible.  I am verifying the same firmware is being used, but I am not finding anything that would explain why one site allowed the the blades to coexist but the other will not.  Vcenter version is the same on both sites.   Please advise,   Joe  ... View more

We are in the process of testing deployment of NAM with SCCM.  If the user is on VPN they are disconnected during the install, can this be prevented?  Our goal is to deploy the NAM module on our workstations/laptops prior to any 802.1X enforcement.  We currently have the ISE in monitoring mode and only a few ports configured for 802.1X allowing MAB as well.  I have deployed a policy for both wired and wireless that allows for 802.1X.  I have not removed the laptop from our corporate network and attempted to join a non corp wireless network.  How does Anyconnect NAM react if there is no corp network available, will it use a predefined "home" network and allow the users to connect as they normally would?   Thanks,   Joe   ... View more

We have a raid 1 with 2 drives in a b series server and have purchase 2 larger drives. Is the process as simple as pulling one drive and letting it rebuild then replacing second. Once the raid is healthy extending space. The OS is windows installed on the blade.    Thanks,   Joe ... View more

We have around 1500 vpn clients and would like to utilize the internal CA on ISE to issue/revoke certificates.  Is this a supported deployment?  We have different authentication methods for specific vpn users (AD/RSA) and utilize a certificate map to trigger the tunnel group and ISE authentication policies to match.  We would like to be able utilize scep from the ASA to ISE to issue specific client certs.  We have this working but don't want to deploy if using the internal ISE CA in this fashion is not advise/supported.   Thanks,   Joe ... View more