×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

CISCO ISE Active Users

Unanswered Question
Nov 7th, 2014
User Badges:

HI everyone.

Is it possible to see all the users that have been logged and allowed by Cisco ISE, and that are currently active; and to force them to log off or end up their connection? (for example, users that have to authenticate in a Guest Portal)

How can we do it?. 

Thanks!

 

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4.3 (3 ratings)
Loading.
Marvin Rhoads Fri, 11/07/2014 - 18:21
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,
  • Cisco Designated VIP,

    2017 Firewalling, Network Management, VPN

Operations, Authentications, Show live sessions. From there you can force a CoA or Terminate a session. It's a per-user action.

See the Total Endpoints widget on the home page and click on it to drill down into endpoints for further breakdown.

Soporteco Fri, 11/07/2014 - 19:44
User Badges:

Hello Marvin, and thanks for the answer. One of our customers are reporting they cannot see all the users in this page. It only shows few ones, but not all users that are authenticated. Is it supposed to show all active users? 

nspasov Sat, 11/08/2014 - 20:49
User Badges:
  • Cisco Employee,
  • Cisco Designated VIP,

    2017 AAA, Identity and NAC Security

Can you tell us if they are not seeing users from the wired or the wireless network?

Soporteco Mon, 11/10/2014 - 17:36
User Badges:

They are not seeing users from the wireless network. They want to see a complete list that shows all the current active users, and to be able to deauthenticate them.

Marvin Rhoads Mon, 11/10/2014 - 21:13
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,
  • Cisco Designated VIP,

    2017 Firewalling, Network Management, VPN

As long as all those WLAN IDs are set to authenticate users via ISE, they should show up in the page I indicated. I have done several implementations and this has always been the case (as it is documented to work).

If you're not seeing the same, you should probably open a TAC case to walk through the setup to investigate.

Soporteco Tue, 11/11/2014 - 07:48
User Badges:

Thanks a lot. Just one question. In ISE we have HOME, MONITOR, POLICY, and ADMINISTRATION. I think the client is looking in the MONITOR tab and there, they find a similar option to "Show live sessions". Is this because of the ISE version, or is it due to a different license? (We dont have OPERATIONS tab)

 

nspasov Tue, 11/11/2014 - 13:41
User Badges:
  • Cisco Employee,
  • Cisco Designated VIP,

    2017 AAA, Identity and NAC Security

The "show Live Sessions" option is a feature of ISE 1.2 and later. If the customer is running an older version (1.1.x) then they will not see it. 

 

Thank you for rating helpful posts!

Actions

This Discussion

Related Content