New ISE PSN Node registers successfully but after that keeps getting "Replication stopped-Please do a manual sync"

[joaos]

Hi everyone,

I have a 2.1 (patch2) deployment with 2 Pan/mnt and 4 PSN and I'm trying to add a new PSN node.

All the tasks (reimaging new appliance, install patchs, Certificates,etc) were done correctly and when I register the new node I don't get any error message and I can see the new PSN in the deployment.

However, while the other PSN's keep getting synced,  the new one keeps getting a growing number of messages to be synced until it gets a warning signal (yellow triangle) with the message "Replication stopped. Please do a manual sync"

After we do a manual resync, it says that operation was successful but the symptom appears again with a growing number of messages to be synced.

I have a firewall between the new PSN and PAN's but the rules are permitting IP

Can anyone give some help on this issue?

Thanks

[joaos]

I found out that there was a tcp-mss adjust issue since customer has a tunnel beetween both sites where pan and psn are located