CISCO ISE Active Users

Soporteco · ‎11-07-2014

HI everyone.

Is it possible to see all the users that have been logged and allowed by Cisco ISE, and that are currently active; and to force them to log off or end up their connection? (for example, users that have to authenticate in a Guest Portal)

How can we do it?.

Thanks!

edelgado · ‎11-07-2014

Hello,

The ISE keeps a record of all the users and you can see the active users.

This should be under monitoring I dont recall the specific tab but I know this is possible.

Regards,

Marvin Rhoads · ‎11-07-2014

Operations, Authentications, Show live sessions. From there you can force a CoA or Terminate a session. It's a per-user action.

See the Total Endpoints widget on the home page and click on it to drill down into endpoints for further breakdown.

Soporteco · ‎11-07-2014

Hello Marvin, and thanks for the answer. One of our customers are reporting they cannot see all the users in this page. It only shows few ones, but not all users that are authenticated. Is it supposed to show all active users?

nspasov · ‎11-08-2014

Can you tell us if they are not seeing users from the wired or the wireless network?

Soporteco · ‎11-10-2014

They are not seeing users from the wireless network. They want to see a complete list that shows all the current active users, and to be able to deauthenticate them.

Marvin Rhoads · ‎11-10-2014

As long as all those WLAN IDs are set to authenticate users via ISE, they should show up in the page I indicated. I have done several implementations and this has always been the case (as it is documented to work).

If you're not seeing the same, you should probably open a TAC case to walk through the setup to investigate.

Soporteco · ‎11-11-2014

Thanks a lot. Just one question. In ISE we have HOME, MONITOR, POLICY, and ADMINISTRATION. I think the client is looking in the MONITOR tab and there, they find a similar option to "Show live sessions". Is this because of the ISE version, or is it due to a different license? (We dont have OPERATIONS tab)

nspasov · ‎11-11-2014

The "show Live Sessions" option is a feature of ISE 1.2 and later. If the customer is running an older version (1.1.x) then they will not see it.

Thank you for rating helpful posts!