Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Users might experience few discrepancies in Search results. We are working on this on our side. We apologize for the inconvenience it may have caused.
New Member

ISE 1.2 notifications

Dears ,

          is there anyway to send notifications about authentication failures to be sent by mail?

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: ISE 1.2 notifications

Going through the 1.2 config guide, I see there is an "excessive failed attempts" alarm that can be configured with a threshold  and includes filters and and gets emailed to the admin contacts defined there.

Cisco ISE alarms

http://www.cisco.com/en/US/docs/security/ise/1.2/user_guide/ise_mnt.html#wp1524784

Once the threshold is met, the Excessive Authentication  Attempts and Excessive Failed Attempts alarms are triggered. The numbers  displayed next to the Description column are the total number of  authentications that are authenticated or failed against Cisco ISE in  last 15 minutes.

Alarms are not triggered when you add users or endpoints to Cisco ISE.

Enabling and configuring alarms

http://www.cisco.com/en/US/docs/security/ise/1.2/user_guide/ise_mnt.html#wp1523173

~BR
Jatin Katyal

**Do rate helpful posts**

~BR Jatin Katyal **Do rate helpful posts**
1 REPLY
Cisco Employee

Re: ISE 1.2 notifications

Going through the 1.2 config guide, I see there is an "excessive failed attempts" alarm that can be configured with a threshold  and includes filters and and gets emailed to the admin contacts defined there.

Cisco ISE alarms

http://www.cisco.com/en/US/docs/security/ise/1.2/user_guide/ise_mnt.html#wp1524784

Once the threshold is met, the Excessive Authentication  Attempts and Excessive Failed Attempts alarms are triggered. The numbers  displayed next to the Description column are the total number of  authentications that are authenticated or failed against Cisco ISE in  last 15 minutes.

Alarms are not triggered when you add users or endpoints to Cisco ISE.

Enabling and configuring alarms

http://www.cisco.com/en/US/docs/security/ise/1.2/user_guide/ise_mnt.html#wp1523173

~BR
Jatin Katyal

**Do rate helpful posts**

~BR Jatin Katyal **Do rate helpful posts**
495
Views
0
Helpful
1
Replies
CreatePlease to create content