Guest

Preview Tool

Cisco Bug: CSCul66272 - ISE: Terminate CoA during posture for unknown user-agent DynGate

Last Modified

Jun 08, 2016

Products (1)

  • Cisco Identity Services Engine

Known Affected Releases

1.2(0.899) 1.3(0.830)

Description (partial)

Symptom:
The NAC Agent gets suck in a posture loop.  The sequence of events seen for the agent is:
1) An authentication entry is seen for the host and posture is set to pending.
2) A CoA is sent for the host with the posture status matching the globally set default posture status.
3) An authentication is again seen for the host with the posture status set to pending.

Conditions:
ISE 1.2.0.899
An application is installed on the end host that sends an HTTP or HTTPS packet with an unknown user-agent.
Posture is configured and in use.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.