Cisco Ise 13 User Guide

Usage GuidelinesFields
AllowsyoutodisplaytheinstallationwizardontheclientduringWSUS
updates:
•ShowUI—DisplaystheWindowsUpdateInstallationWizardprogress
onWindowsclients.UsersmusthaveAdministratorprivilegesonclients
toviewtheinstallationwizardduringWSUSupdates.
•NoUI—HidestheWindowsUpdateInstallationWizardprogresson
Windowsclients.
YoumustselecttheNoUIoption,ifyouwanttoallowusers
withoutAdministratorprivilegestouseWSUSremediationto
installWindowsupdates.
Note
InstallationWizardInterface
Setting
Related...

Usage GuidelinesFields
ChooseaRemediationfromthelist.
Youcanalsocreatearemediationactionandassociateitwiththerequirement.
Youhaveatextboxforalltheremediationtypesthatcanbeusedtocommunicateto
theAgentusers.Inadditiontoremediationactions,youcancommunicatetoAgent
usersaboutthenoncomplianceofclientswithmessages.
TheMessageTextOnlyoptioninformsAgentusersaboutthenoncompliance.Italso
providesoptionalinstructionstotheusertocontacttheHelpdeskformoreinformation,...

CHAPTER 31
Operations User Interface Reference
•RecentRADIUSAuthentications,page857
•ShowLiveSessions,page858
•DiagnosticTools,page860
Recent RADIUS Authentications
ThefollowingtabledescribesthefieldsontheAuthenticationspage,whichdisplaysrecentRADIUS
authentications.Thenavigationpathforthispageis:Operations>Authentications>ShowLive
Authentication.
Table 133: Live Authentications
Usage GuidelinesOption
Showsthetimethatthelogwasreceivedbythemonitoringandtroubleshooting...

Usage GuidelinesOption
Showsthetypeofendpointthatisprofiled,forexample,profiledtobeaniPhone,
Android,MacBook,Xbox,andsoon.
EndpointProfile
Showsthenameofthepolicyselectedforspecificauthentication.Authentication
Policy
ShowstheIPaddressoftheendpointdevice.IPAddress
ShowstheIPaddressoftheNetworkAccessDevice.NetworkDevice
Showstheportnumberatwhichtheendpointisconnected.DevicePort
Showsanauthorizationprofilethatwasusedforauthentication.Authorization
Profiles...

Table 134: Live Sessions
DescriptionField
Showsthetimestampwhentheauthenticationsessionwasinitiated.Initiated
Showsthetimestampwhenthesessionwaslastupdatedduetoanychange,likeaCoA
action.
Updated
Showsthetimespan(inseconds)ofauser'ssession.AccountSession
Time
Showsthecurrentstatusoftheendpointdevice.SessionStatus
UsethistodynamicallychangetheauthorizationofanactiveRADIUSsessionor
disconnectanactiveRADIUSsession.
CoAAction
Showsthenumberoftimesthesessionhasbeenretried.RepeatCount...

DescriptionField
ShowstheEndpointProtectionServicestatusofadeviceasQuarantine,Unquarantine,
orShutdown.
EPSStatus
Showstheboolean(Y/N)usedtotrackthatanendpointhasbeenhandedoffduring
roaming,fromoneWLCtoanother.Ithasthevalueofcisco-av-pair=nas-update=Y
orN.
WLCRoam
Showsthenumberofpacketsreceived.PacketsIn
Showsthenumberofpacketssent.PacketsOut
Showsthenumberofbytesreceived.BytesIn
Showsthenumberofbytessent.BytesOut
ShowsiftheendpointwasauthenticatedviaRADIUSorIdentityMapping.SessionSource
Diagnostic...

Usage GuidelinesOption
Selectatimerange.TheRADIUSauthenticationrecordsthatarecreatedduring
thistimerangeareused.
TimeRange
IfyouchooseCustomTimeRange,enterthestartdateandtime,orclickthe
calendaricontoselectthestartdateandtime.Thedateshouldbeinthe
mm/dd/yyyyformatandtimeinthehh:mmformat.
StartDate-Time
IfyouchooseCustomTimeRange,entertheenddateandtime,orclickthe
calendaricontoselecttheenddateandtime.Thedateshouldbeinthe
mm/dd/yyyyformatandtimeinthehh:mmformat.
EndDate-Time...

forthispageis:Operations>Troubleshoot>DiagnosticTools>GeneralTools>EvaluateConfiguration
Validator.
Table 137: Evaluate Configuration Validator Settings
Usage GuidelinesOption
EnterInformation
EntertheIPaddressofthenetworkdevicewhoseconfigurationyou
wanttoevaluate.
NetworkDeviceIP
Selecttheconfigurationitemsbelowthatyouwanttocompareagainsttherecommendedtemplate.
Thisoptionisselectedbydefault.AAA
Thisoptionisselectedbydefault.RADIUS
Thisoptionisselectedbydefault.DeviceDiscovery...

Usage GuidelinesOption
EntertheMACaddresstofilteron,usingformat:xx-xx-xx-xx-xx-xxMACAddress
Selecttheauthenticationstatustofilteron:PostureStatus
EnterthefailurereasonorclickSelecttochooseafailurereason
fromalist.ClickCleartoclearthefailurereason.
FailureReason
Selectatimerange.TheRADIUSauthenticationrecordsthatare
createdduringthistimerangeareused.
TimeRange
(AvailableonlywhenyouchooseCustomTimeRange)Enterthe
startdateandtime,orclickthecalendaricontoselectthestartdate...

Table 139: TCP Dump Settings
Usage GuidelinesOption
•Stopped—thetcpdumputilityisnotrunning
•Start—Clicktostartthetcpdumputilitymonitoringthe
network.
•Stop—Clicktostopthetcpdumputility
Status
Choosethenameofthehosttomonitorfromthedrop-downlist.
InlinePostureNodesarenot
supported.
Note
HostName
Choosethenetworkinterfacetomonitorfromthedrop-downlist.
Youmustconfigureallnetworkinterfacecards(NICs)with
anIPv4orIPv6addresssothattheyaredisplayedinthe
CiscoISEAdminportal.
Note
NetworkInterface...