Cisco Ise 13 User Guide

•Blockaproblematichost—YoucanusetheSessionterminationwithportshutdownoptiontoblockan
infectedhostthatsendsalotoftrafficoverthenetwork.However,theRADIUSprotocoldoesnot
currentlysupportamethodforre-enablingaportthathasbeenshutdown.
•ForceendpointstoreacquireIPaddresses—YoucanusetheSessionterminationwithportbounceoption
forendpointsthatdonothaveasupplicantorclienttogenerateaDHCPrequestafteraVLANchange.
•Pushanupdatedauthorizationpolicytoanendpoint—YoucanusetheSessionreauthenticationoption...

SessionreauthenticationwithlastandSessionreauthenticationwithrerunoptionsarenot
currentlysupportedinCiscoIOSsoftware.
Note
•Sessiontermination—Justendthesession.Theswitchreauthenticatestheclientinadifferentsession.
•Sessionterminationwithportbounce—Terminatethesessionandrestarttheport.
•Sessionterminationwithportshutdown—Terminatethesessionandshutdowntheport.
Step 4ClickRuntoissueCoAwiththeselectedreauthenticateorterminateoption.
IfyourCoAfails,itcouldbeoneofthefollowingreasons:...

Logging CategoryDescriptionReport Name
ChooseAdministration>System>Logging
>LoggingCategoriesandselectFailed
Attempts.
TheRADIUSErrorsreport
enablesyoutocheckforRADIUS
RequestsDropped
(authentication/accounting
requestsdiscardedfromunknown
NetworkAccessDevice),EAP
connectiontimeoutsand
unknownNADs.
SometimesISEwill
silentlydropthe
AccountingStoprequest
ofanendpointifuser
authenticationisin
progress.However,ISE
startsacknowledgingall
accountingrequestsonce
theuserauthenticationis
completed.
Note...

Logging CategoryDescriptionReport Name
ChooseAdministration>System>Logging
>LoggingCategoriesandselectSystem
Diagnostics.
TheOCSPMonitoringReport
specifiesthestatusoftheOnline
CertificateStatusProtocol
(OCSP)services.Itidentifies
whetherCiscoISEcan
successfullycontactacertificate
serverandprovidescertificate
statusauditing.Providesa
summaryofalltheOCSP
certificatevalidationoperations
performedbyCiscoISE.It
retrievesinformationrelatedtothe
goodandrevokedprimaryand
secondarycertificatesfromthe...

Logging CategoryDescriptionReport Name
ChooseAdministration>System>Logging
>LoggingCategoriesandselect
AdministrativeandOperationalaudit.
TheAdministratorLoginsreport
providesinformationaboutall
GUI-basedadministratorlogin
eventsaswellassuccessfulCLI
loginevents.
AdministratorLogins
—TheInternalAdministrator
Summaryreportenablesyouto
verifytheentitlementof
administratorusers.Fromthis
report,youcanalsoaccessthe
AdministratorLoginsandChange
ConfigurationAuditreports,
whichenablesyoutoviewthese...

Logging CategoryDescriptionReport Name
ChooseAdministration>System>Logging
>LoggingCategoriesandselecttheselogging
categories:InternalOperationsDiagnostics,
DistributedManagement,Administrator
AuthenticationandAuthorization.
TheSystemDiagnosticreport
providesdetailsaboutthestatus
oftheCiscoISEnodes.IfaCisco
ISEnodeisunabletoregister,you
canreviewthisreportto
troubleshoottheissue.
Thisreportrequiresthatyoufirst
enableseveraldiagnosticlogging
categories.Collectingtheselogs
cannegativelyimpactCiscoISE...

Logging CategoryDescriptionReport Name
—TheNetworkDeviceSession
StatusSummaryreportenables
youtodisplaytheswitch
configurationwithoutlogginginto
theswitchdirectly.
CiscoISEaccessesthesedetails
usinganSNMPqueryand
requiresthatyournetworkdevices
areconfiguredwithSNMP
v1/v2c.
Ifauserisexperiencingnetwork
issues,thisreportcanhelpyou
identifyiftheissueisrelatedto
theswitchconfigurationrather
thanwithCiscoISE.
NetworkDeviceSession
Status
—TheDataPurgingAuditreport
recordswhentheloggingdatais
purged....

Logging CategoryDescriptionReport Name
—ThepxGridAdministratorAudit
reportprovidesthedetailsofthe
pxGridadministrationactions
suchasclientregistration,client
deregistration,clientapproval,
topiccreation,topicdeletion,
publisher-subscriberaddition,and
publisher-subscriberdeletionon
thePrimaryPAN.
Everyrecordhastheadministrator
namewhohasperformedthe
actiononthenode.
YoucanfilterthepxGrid
AdministratorAuditreportbased
ontheadministratorandmessage
criteria.
pxGridAdministrator
Audit...

Logging CategoryDescriptionReport Name
ChooseAdministration>System>Logging
>LoggingCategoriesandselectPostureand
ClientProvisioningAuditandPostureand
ClientProvisioningDiagnostics.
TheClientProvisioningreport
indicatestheclientprovisioning
agentsappliedtoparticular
endpoints.Youcanusethisreport
toverifythepoliciesappliedto
eachendpointtoverifywhether
theendpointshavebeencorrectly
provisioned.
ClientProvisioning
ChooseAdministration>System>Logging
>LoggingCategoriesandselecttheselogging...

Logging CategoryDescriptionReport Name
ChooseAdministration>System>Logging
>LoggingCategoriesandselectPostureand
ClientProvisioningAuditandPostureand
ClientProvisioningDiagnostics.
ThePostureDetailAssessment
reportprovidesdetailsabout
posturecompliancyfora
particularendpoint.Ifanendpoint
previouslyhadnetworkaccess
andthensuddenlywasunableto
accessthenetwork,youcanuse
thisreporttodetermineifa
postureviolationoccurred.
PostureDetail
Assessment
ChooseAdministration>System>Logging...