I had a similar requirement from a customer (tag certain ports to be treated differently), and I was able to utilize the NAS-Port-Type attribute to send a Port-Type other than Ethernet and filter on the new type being sent for those ports.  Not ideal...

I had a similar requirement from a customer (tag certain ports to be treated differently), and I was able to utilize the NAS-Port-Type attribute to send a Port-Type other than Ethernet and filter on the new type being sent for those ports.  Not ideal...

Another option if you want to have hitcounts available in FMC is to go to Analysis > Custom > Custom Workflows and create a new workflow.  You can give the workflow a name like 'ACL Hits' or whatever you like and Select the 'Connection Events' table....

Just had this same issue on ISE 2.1, replacing the Root CA Cert Chain worked like a charm.  Thanks!

Thanks, I'd appreciate it.