Preview Tool

Cisco Bug: CSCvu22058 - ISE with DUO as External Radius Proxy drops access-reject

Last Modified

Sep 18, 2020

Products (1)

  • Cisco Identity Services Engine

Known Affected Releases

2.4(0.909) 2.7(0.901)

Description (partial)

DUO is integrated with ISE as external radius server. When user does not respond to the DUO push, DUO sends access-reject after timeout configured in DUO. ISE drops this access-reject from DUO & marking DUO as dead after timeout value configured in ISE. Since the server is marked as dead, subsequent authentication requests are dropped for 5 mins.

DUO integrated with ISE as external radius server
Bug details contain sensitive information and therefore require a account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.