ISE-PIC 3.2 no user session

[vmorris]

We recently installed and configure ISE-PIC version 3.2. We were able to configure it and add the subscribers and providers. However, we are not seeing any user session. I have search the the internet, but unable to find a solution. I tried with both WMI and the agent, but no dice. We are configured for advanced auditing as others have mentioned, as we have other application using WMI.

We can see the necessary authentication being populated in the event viewer. All DCs are green, however we do see quite a bit of this error on DCs where agent is installed. Agent was pushed from ISE-PIC to respective DCs

2023-04-01 04:40:03,471 ERROR [Grizzly-worker(24)][[]] com.cisco.idc.agent-probe- failed to update status for DC ....... Couldn't find DC

[ahollifield]

DNS is good?

[vmorris]

Yes. DNS is good.

Additionally, I see the following errors in the log

ERROR - Rest Client, Error getting configuration from https:/<IP Address removed>:9095 : The operation has timed out

Configuration , Received empty config
2023-04-04 14:05:54,996 INFO - DCs Manager, Found the following IPv4 addresses for local machine:<IP Address>

[Nancy Saini · Accepted solution]

Are you using WMI for ISE-PIC. If yes then it won't work. As per\advisory from the Microsoft side, WMI agent is no longer working for Passive ID : https://learn.microsoft.com/en-us/answers/questions/146551/wmic-stopped-working-on-windows-10-2004

To overcome this issue, use the MS-RPC agent, please refer : https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/216512-configure-evt-based-identity-services-en.html