Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Pavel, You can configure a timeout on ISE for the External RADIUS server, this way ISE will reply with an access-reject after that time, just before the timeout expires on the ASA. Regards,Daniel
Hi,
Is ISE giving you the error #2032? If that's the case, the bug (CSCuv28369) was solved in patch 6.
https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/release_notes/ise22_rn.html
Best regards,
-dacabrer