Pavel, You can configure a timeout on ISE for the External RADIUS server, this way ISE will reply with an access-reject after that time, just before the timeout expires on the ASA. Regards,Daniel
Hi,
Is ISE giving you the error #2032? If that's the case, the bug (CSCuv28369) was solved in patch 6.
https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/release_notes/ise22_rn.html
Best regards,
-dacabrer
