08-16-2012 04:53 AM - edited 03-10-2019 07:26 PM
Has anyone had any problems with high CPU usage when ISE is under very minimal load, especially in the middle of the night?
At the moment there are max 10 wireless clients connected at any one time, but none overnight, yet the CPU sits around 90% all of the time.
The ISE in question is a VM, and has 4GB RAM, and 2 CPU's allocated. It is a stand alone system, and is only being used for wireless auth.
I haven't been able to find much in the way of being able to track which process is consuming CPU time, so it's hard to know exactly what is the cause, and where to look to resolve.
08-16-2012 08:30 AM
Do you have the automatic updates configured for the client provisioning setting? Try disabling the automatic updates:
http://www.cisco.com/en/US/docs/security/ise/1.1.1/user_guide/ise_client_prov.html#wpxref43943
Thanks,
Tarik Admani
*Please rate helpful posts*
08-16-2012 05:59 PM
Automatic updates for the client provisioning is disabled, as is posture updates.
08-16-2012 07:45 PM
Do you have all the probes turned on? Can you disable any unused probes if they are enabled. I can try looking at a support bundle for you or you can have tac do this.
Thanks,
Tarik Admani
08-16-2012 07:49 PM
There are only three probes enabled at the moment, RADIUS, NMAP, and DNS.
08-16-2012 10:59 PM
I am curious to see if the nmap probe is causing this issue, can you see if disabling this will bring the cpu utilization down? If it does or doesnt I would suggest opening a tac case, they should be able to look into your virtual machine a little deeper.
Thanks,
Tarik Admani
*Please rate helpful posts*
09-30-2012 10:01 AM
Have you installed patch 2? One of the reasons for the issue of this patch was to address this issue and data base replication.
Cheers
10-01-2012 05:09 PM
Yep Patch 2 has been applied, but didn't have any effect on the issue. Also as I mentioned in the original post this is a stand alone system, so there wouldn't be any replication to other members.
10-01-2012 05:24 PM
Is this a virtual machine if so is this local or san storage?
Sent from Cisco Technical Support Android App
10-01-2012 05:25 PM
Yes it is a VM, and it is running on SAN storage, as the VM host is a blade server.
10-01-2012 05:28 PM
Blade storage is that iscsi? Was it originally provisioned for 60gb and the remaining provisioned after?
Sent from Cisco Technical Support Android App
10-01-2012 05:30 PM
It is a fibre channel SAN connectivity, and was provisioned from the start with 400GB storage.
cheers
10-01-2012 05:34 PM
Your best bet is to open a tac case to have them take a look. Also you might want to try to rebuild the virtual machine from scratch and monitor again.
Thanks.
Sent from Cisco Technical Support Android App
10-01-2012 05:36 PM
Yep have got a TAC case under way, but it is slow to work through. At the moment it looks like the profiler service is the cause, but it is yet to be confirmed.
cheers
10-02-2012 07:05 PM
Martyn, if you get a resolution please let us know. I'm having a similar issue. thanks!
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: