ISE 1.2 Posture Update Issue

In ISE 1.2 below message is showing when we do a web posture update either manual or automatic.
"Remote address is not accessible. Please make sure update feed url, proxy address and proxy port are properly configured".
It was working fine for long time and all of a sudden it stopped working
and no changes have made on the network side.
https://www.cisco.com/web/secure/pmbu/posture-update.xml is working in the browser.
Few customers had reported the same. Boxes are installed with latest patch version 7.
We can upload the updates through offline mode.

I have experienced the same issue. Both the posture update feed URLs 
1. https://www.cisco.com/web/secure/pmbu/posture-update.xml
2. https://www.perfigo.com/ise/posture-update.xml
give the same error, when the ISE boxes try to do the updates. But these URLs are accessible from outside.
A TCP dump taken from a box shows as "Certificate unkown Alert " (when it tries to update) for the received certificate from the other end. Then the ISE box sends a (FIN,ACK) and terminates the session.
The relevant pcap file is attached

Similar Messages

  • ISE 1.2 - Posture Detail Assessment - enforcement audit mode report not show status for non-compliant

    ISE 1.2 - Posture Detail Assessment - enforcement audit mode report not show status for non-compliant.
    - For old version 1.1.4 it can be reported for non-compliant, How can I generate report for this? 
    Thanks
    Kosin Usuwanthim

    It used to be in there (id 226635 is the last one with it); should I clean it up a bit and put it back with a bit more of a disclaimer?

  • Why can't we get a straight answer from Apple about updater issues?

    Why are there thousands and thousands of posts from people all having the same issue? We try to update IPod software using latest updater, and it causes IPod to no longer be recognized. All we want is someone from Apple to FIX THE PROBLEM! Yet all we get are refferals to complicated articles that never seem to work for at least half the people. Clearly it is a problem with these updaters. WHY IS APPLE NOT FIXING THIS ISSUE? Can anyone give me a straight answer!?

    Hi Wolf,
    Welcome to Apple Discussions
    "thousands and thousands of posts"
    There are roughly 10,300 thread with 50,000 posts in the iPod Nano forum, and there are probably another 500,000 who don't even know it exists. I don't there there has been a thousand posts on the updater issue. It may seem like thousands upon thousands, but don't forget; you're at an Apple Support Forum.
    "All we want is someone from Apple to FIX THE PROBLEM!thousands and thousands of posts"
    There's no need to "shout". I don't think Apple is going to hear you from shouting in a user to user forum. Nor will you probably get a answer (here) from Apple for the same reason. I have a -------- (straight) answer for you. I don't know what's going on specifically (no one really knows in this forum because they are all users. Anyone who would know won't say), but I can assure you that Apple isn't ignoring the issue. They are the quickest to respond to any problem that comes their way. If you would like to get Apple's attention, I don't suggest ranting and raving in the iPod user to user forum. I suggest submitting polite feedback to Apple here.
    Jon

  • Is there a consensus on how to solve security update issues?

    hi,
    i'm writing to you from a PPC G4 (AGP graphics) that will self-destruct by the time i switch off and (attempt) to re-start tomorrow. i will then need to do a re-install, just to see if i have gotten any replies (grinds teeth to the root). it will probably be my 8 th re-install in the past month. i just can'st takes no mores, Cap'n
    <exasperation>deep breath... each time i have done a clean install, zero-ed all data when erasing (7 times over, on this occasion), repaired permissions before and after each software update, and followed every advice i could find via google to pre-empt another "Error: underlying task reported failure on exit" and the inevitable hanging grey screen; i have earned nothing but another Disk Utility report of the same problem. my HD seems to be OK - Disk Utility and Disk Warrior both say it's "verified" by SMART (although i've read this could be no assurance...). it's 40 GB, nothing else installed but NetBarrier; nothing saved on it (just 3GB of OS).
    i've searched this forum over the last weekend and come across a diverse range of methods in resolving software update issues. i have tried downloading the security update and safari 3.2 directly from the site and bypassing Software Update- to no avail (but noticed that they are quite larger in MB than via Software Update??).
    the one suggestion the intrigued me was installing the update via Terminal. why would this be any different? the worst thing about this is that there is no universal way that'll work for all, just individual solutions for different macs??? could my problem be exacerbated by using the double layer (double the permissions to fix?) of a Panther OS with Tiger Upgrade disk?
    when i last tried to resolve the "error" with safe mode, fsck and DU Repair Disk/Permissions, which initially failed, i resorted to Disk Warrior, which re-built the directory, and "fixed" the HD. when i re-tried fsck it said the HD was "ok", but i still had the "error: underlying task..." on DU?
    is there an issue with the Security Update oo8 because it's PRIMARILY for 10.5 and not Tiger? why have some encountered this problem and others escaped any seeming conflicts ? is this problem also caused by JAVA updates (there are, after all, 4 updates!)
    more importantly, WHAT CAN I DOOOOOOOO?
    thank you

    looking at your suggestion to check /Library/Startup items in the concurrent thread ("Help needed after installing Security Update 2008-008"), i recalled that the only thing i have in this file system is 3 folders concerning Intego, NetBarrier and Virus Barrier. one of these contains the NetBarrier x4 daemon which has no image, just the apple "pencil, ruler, pen on paper" "A" image. i don't think it correctly downloaded, but this the case in every instance.
    i'm running netbarrier x4 10.4.5 updated and downloaded on installation. intego Support says that there should be nothing in my "Startup/Login items". i thought they meant Login items (users>login items) because when i take the folders out of my "/Library/Startup items", NetBarrier fails to "initialize".
    intego is now on newtbarrier x5, but they say x4 is fully compatible with Tiger???
    my baby maybe getting on, but it's strong enough, i just need to know what's bugging it!

  • 10.9.2 Update Issue (VPN) - Eclipse Perl debugger issues while connected to VPN

    This post was initially added to this discussion: 10.9.2 Mavericks update issues
    I have yet another issue related to 10.9.2 update - Eclipse Perl debugger issues while connected to VPN...
    One of the big changes introduced by 10.9.2 update - are VPN changes (security fixes). Unfortunately, whatever these changes are - they "broke" Eclipse (OpenSource IDE) debugger. I am not sure if *all* programming languages (Eclipse plugins) are affected by this, but I know for sure that 'Epic' (Perl plugin) debugger *stopped working* while system is connected through VPN.
    Here is the error that gets “popped-up” in the Eclipse:
    Timed out while waiting for Perl debugger connection
    … and here is exact exception stack that gets printed:
    Unable to connect to remote host: 130.10.210.74:5000
    Compilation failed in require.
    at /Users/valeriy/workspace/ROBO-PROD-RA-685/src/lib/test/Val_test.pm line 0.
              main::BEGIN() called at /Users/valeriy/workspace/.metadata/.plugins/org.epic.debug/perl5db.pl line 0
              eval {...} called at /Users/valeriy/workspace/.metadata/.plugins/org.epic.debug/perl5db.pl line 0
    BEGIN failed--compilation aborted.
    at /Users/valeriy/workspace/ROBO-PROD-RA-685/src/lib/test/Val_test.pm line 0.
    Can't use an undefined value as a symbol reference at /Users/valeriy/workspace/.metadata/.plugins/org.epic.debug/perl5db.pl line 7596.
    END failed--call queue aborted.
    at /Users/valeriy/workspace/ROBO-PROD-RA-685/src/lib/test/Val_test.pm line 0.
    (of course IP address changes dynamically for each VPN connection session)…
    I was able to prove that this issue is related to 10.9.2 update:
    Issue *does not* exist under 10.9.1 (I had to revert back to 10.9.1 to get it working again)
    No updates were performed around the same time 10.9.2 update occurred (I verified that using Software Update log)
    No configuration changes were introduced around the same time
    Reverting back to 10.9.1 using Time Machine (thanks god I had backup !!!) fixed the issue
    Steps to reproduce this issue:
    In Eclipse, try to use 'Epic' (Perl plugin) to debug any perl script while *not* connected through VPNEpic debugger works
    Connect to VPN
    Start Epic debugger to debug same script
    Debugger *does not* start, and "Timed out while waiting for Perl debugger connection" error pop-up comes up after some time. At the same time, exception stack (listed above) is printed in Eclipse's console
    I am programmer/software developer, I work remotely (telecommute) and thus have to rely on use of VPN to connect to company's intranet. Perl - is primary language used by my team, and we use Eclipse IDE with Epic plugin - heavily. Use of Epic's debugger - is a *very large* aspect of my work, I cannot work without it. So in essense, 10.9.2 has *entirely* disrupted my ability to work! It took me almost a week to get back to normal work environment, and I cannot afford to let it happen again... I need Apple's development team resolve this VPN related issue, as soon as possible! Because of this issue, I am *stuck* with 10.9.1 and can not upgrade my laptop to any other versions. In fact, I had to disable system updates - just so I do not run into this issue again... I contacted Apple's Tech Support on 02/28 with this issue (Ref: 582428110), asking to raise trouble ticket. Since then, I tried to follow-up on that issue, but do not get any information. Please advise on the status:
    is there a trouble ticket to track this issue?
    is there any progress?
    what's the ETA for an update that fixes this problem?
    - Val
    Message was edited by: vpogrebi

    Am I the only one experiencing this issue ???

  • My new iPod Classic will not sync with my new Mac Book. My iPhone 5 does, so does 2nd gen. iPod touch. Apple Store cannot figure it out. Tried different Classics on different Macs, same thing. iTunes update issue ?

    The iPod Classic I bought a month ago is not synching with my new Mac Book I bought 3 weeks ago. All the software was immediately updated. My iPhone 5 synchs fine, and so does my 2nd generaton iPod Touch. The original computer I synched all of these devices on was my HP latop. I bought my Mac and Classic to the Apple Store for a 'Genius Appt' and they could not figure out what the problem is. The connected my Classic to another computer and the same thing happens. It says device is not recognized. They also took other iPod Classics and connected them to my Mac and other Macs. The same thing was happening. They took notes and said it probably is an iTunes update issue.
    I can manually drag songs into my Classic but I lost all playlists because it cannot be backed up as well and they had to restore it. For now I am holding on to it but it's usless to me if I cannot use it the way I liked too. I used it for the gym and bike riding and my last iPod battery died after 6 years. A charge would last 45 miutes. I love the Classic for what I use it for but it's a $275 brick to me now. At least the renewed by receipt so I can get a full refund.
    Is anyone else seeing this issue ? The Apple Store employee said he saw a first generation iPad havng the same issue. As of now the Support Dest is unaware of this. As much as I love my new Mac I am disappointed I cannot sync my new Classic to it. Total bummer.
    Any help would be apprecated.

    By the way, I totally restored everything. It was ok. It starts to 'unrecognize' my iPod Classic when it comes to synching with iPhoto. After this happened all the menus disappeared from my iPod (music, Podcasts, movies synched fine). It seems to be a problem when synching with iPhoto. It was the same thing before.

  • Unable to Resolve Windows Update Issue in Windows 8.1

    Hello,
    I recently, as far back as 1 month ago, began experiencing issues with the update service under the Windows 8.1 OS platform.
    I found that I was having to repeatedly run the Windows Update Troubleshooting Tool. This appeared to fix the issue with each run of the tool, but eventually I'd have the same problem receiving updates again. My problem is as follows:
    1. Windows Update service hangs during register analysis.
    2. Unable to reset (stop or restart) wuauserv. 
    3. Unable to reset (stop or restart) Cryptserv.
    4. Unable to reset (stop or restart) BITS.
    5. Unit recently, was unable to connect to internet from Desktop GUI, but was able to connect using Metro GUI.
    I'm not sure is there was a recent update that caused this issue, but I can no longer download updates for my system, nor can I successfully run the Windows Update Fixit tool.

    Hi,
    Let's confirm these situations:
    Now your desktop Internet Explorer can't connect Internet.
    You receiving the same updates again and again.
    If I am right, please check that update's installation status from update history.
    Then refer to this article to troubleshoot:
    http://social.technet.microsoft.com/Forums/en-US/c842b997-42a4-41fb-9992-b58d65d068d9/forum-faq-common-steps-to-start-troubleshooting-windows-update-issues?forum=w8itprogeneral
    Karen Hu
    TechNet Community Support

  • ISE 1.2 Posture Assessment with AnyConnect Client

    Hi Experts,
    I need clarity for posture assessment with AnyConnect client. I understood that we had traditional NAC agent with ISE 1.1.
    Since new Anyconnect version 4 has come which is used for ISE 1.3 posture assessment however I am not sure if I can use Anyconnect 4 with ISE 1.2 ?  Can you please put light on this ?
    if not , do I need to upgrade to ISE 1.3 ? what is the process to upgrade to ISE 1.3 ?
    Thanks in advance

    ISE can provision clients with agent and configure agent profiles.You have Client-provisioning policies that enable users to download and install resources on client devices.(Windows and Mac OS X NAC Agents, Cisco NAC Web Agent.

  • Sender JDBC Adapter Select/Update Issue

    Dear All,
    We have configured a Sender JDBC Adapter to Poll data from the DB2 tables. It is working fine and both the select and the update queries written are also getting properly executed and are changing the status of the flag from Y to N once read from database.
    In the communication channel ->
    select * from <table> where flag = 'N'.
    update <table> set flag = 'Y' where flag = 'N'.
    But I have one doubt after executing the select query some new data comes into the table of status flag 'N"., then will this unselected data will also be updated to 'Y' .
    The question is while we do a select and update from XI on the DB table and at the same time there is an insert happening into the table from the other end how will the adpater behave in this case.Will it result in missing of some records during next select/update transaction from XI..
    Your inputs will be appreciated.
    Regards
    Amit

    Amit
    Did you ever get a solution to your question ?
       Sender JDBC Adapter Select/Update Issue  
    Posted: Apr 24, 2008 2:29 PM           Reply 
    Dear All,
    We have configured a Sender JDBC Adapter to Poll data from the DB2 tables. It is working fine and both the select and the update queries written are also getting properly executed and are changing the status of the flag from Y to N once read from database.
    In the communication channel ->
    select * from <table> where flag = 'N'.
    update <table> set flag = 'Y' where flag = 'N'.
    But I have one doubt after executing the select query some new data comes into the table of status flag 'N"., then will this unselected data will also be updated to 'Y' .
    The question is while we do a select and update from XI on the DB table and at the same time there is an insert happening into the table from the other end how will the adpater behave in this case.Will it result in missing of some records during next select/update transaction from XI..
    Your inputs will be appreciated.
    Regards
    Amit

  • Had update issues but now my iphone is in a loop of the apple sign then the circling thing, itunes doesnt even pick it up, cant get past this point!! ? any help?

    had update issues but now my iphone is in a loop of the apple sign then the circling thing, itunes doesnt even pick it up, cant get past this point!! ? any help?

    You might want to check this thread https://discussions.apple.com/thread/3374367 hope this helps

  • Has anyone called about the 1st Gen Update issue?

    I was just wondering if anyone has actually called Apple about the 3.1.3 Update issue with the 1st gen iTouches. I don't want to waste my time and call when they might just respond with "there's no current solution". My iPod has been bricked on that screen with the "plug in the USB cord" symbol for a few days. Help!

    My wife had the same problem with 1st gen 32gb Touch. She uses a pc based laptop with Vista OS. Couldn't get past the Apple logo even when trying to reset. I plugged into my Mac tonight, and for the heck of it, reset the iPod using the on/off button and home screen button. It now would appear in my iTunes and allowed me to reset. It is starting from scratch again (as she doesn't appreciate my play list), but at least it is fully operational again.
    Have seen where others state they can't restore. May be able to using a Mac. Food for thoughts anyway. Hope this helps.

  • Site Manager Update Issue Continues

    Duncan;
    It appears that the iTunes U Desktop Application update issue has not been resolved. I added new content to a collection (see attached link) on Friday. As of this morning, the tracks have not appeared in the iTunes U Desktop application (ver. 10.0.1), although they do appear in the Quick View Preview, but cannot be previewed in that window.
    The tracks have been available for preview and download all weekend on the iPad and iPhone.
    Syd Rodocker
    Tennessee Department of Education
    http://itunes.apple.com/WebObjects/MZStore.woa/wa/viewiTunesUCollection?id=39129 4396

    Greetings All;
    Just checking to see what, if anything has happened with the Public Site Manager Update issue on your campus or in your office.
    I've uploaded content that still hasn't shown up in the iTunes Desktop Application in over two weeks.
    Oddly enough, I have added URL's to our site, and that information shows up within an hour of Publishing the site.
    Just wondering if anyone has experienced a resolution of the issue.
    Syd Rodocker
    Tennessee Department of Education

  • [Forum FAQ] Common steps to start troubleshooting Windows Update issues

    In this article, we provide you some common steps to quickly narrow down Windows Update issues. Before you post your question, you can follow the steps below to see whether
    the issue can be identified and resolved. If not, please post it in Windows 8/8.1 Forum with the analyzed details.
    Scenario 1: New updates can’t be checked.
    Make sure your internet connection works fine.
    Make sure you could connect to Windows Update Server or Microsoft Update.
    For more information about how to troubleshoot problems connecting to Windows Update or to Microsoft Update,
    visit the following Microsoft Web site:
    http://support.microsoft.com/kb/818018
    Scenario 2: Windows Update can’t be installed or configured.
    Suggestion 1: Run the
    Windows Update Troubleshooter
    Press
    WINDOWS + X combination key to open the Control Panel;
    Change its view by “Category”;
    Click
    Find and fix problems;
    Under
    System and Security entry, click Fix problems with Windows Update.
    Follow the instruction to complete it.
    Suggestion 2:
    Make sure the following services could startup automatically
    Press WINDOWS + R combination key, type “services.msc”, press
    Enter;
    Find out the following services and the dependent services:
    Windows Update
    Background Intelligent Transfer Service
    Windows Modules Installer
    Double click every service, on General tab, set its Startup type as “Automatic”;
    Click Apply and OK button.
    Note: If these services miss or damage, you need to use Windows 8/8.1 installation media restore them.
    Suggestion 3:
    Delete the Windows Update cache
    Press
    WINDOWS + R combination key, type “services.msc”, press
    Enter;
    Find out the
    Windows Update service, right click and stop it;
    Located to
    C:\Windows\SoftwareDistribution;
    Delete the whole
    SoftwareDistribution folder.
    Suggestion 4:
    Reset the Windows Update component
    For more information about how to
    reset the Windows update component,
    visit the following Microsoft Web site:
    http://support.microsoft.com/kb/971058
    Suggestion 5:
    Install the Windows Update in a
    Clean Boot state
    For more information about How to perform a clean boot in Windows,
    visit the following Microsoft Web site:
    http://support.microsoft.com/kb/929135
    Suggestion 6:
    Reset, refresh or restore your PC, and then try to Windows Update
    http://windows.microsoft.com/en-gb/windows-8/restore-refresh-reset-pc
    Scenario 3: You might still be repeatedly offered the same update.
    You need to check its installation status and decide if it should be installed again.
    For more
    information about Windows Update or Microsoft Update repeatedly offers the same update,
    visit the following Microsoft Web site:
    http://support.microsoft.com/kb/910339
    Here are the solutions for some common Windows Update error codes or corresponding issues:
    1. .NET Framework update installation error: "0x80070643" or "0x643"
    http://support.microsoft.com/kb/976982
    2. Error 0x800B0100 when you try to install Windows Updates or Microsoft Updates
    http://support.microsoft.com/kb/956702/en-us
    3. Error 0x80070005 in Windows Update when you try to install updates
    http://support.microsoft.com/kb/968003/en-us
    4. Error message 80246008
    http://support.microsoft.com/kb/971058
    5. Error message 80070003
    Stop Windows Update service, rename SoftwareDistribution and catroot2 folder, then restart Windows Update service.
    6. Error message 0x80072f8f
    Check and correct PC’s Time and Date. 
    7. Automatic Windows update settings is gray out.
    Please locate to the below registry:
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU.
    Add Value name: NoAutoUpdate
    Value data: 0 or 1
    0: Automatic Updates is enabled (default).
    1: Automatic Updates is disabled.
    Windows Store app update general troubleshooting steps
    If you're unable to open the Store, try running the
    Apps troubleshooter
    If you can’t find the app update. Please consider these scenario:
    Confirm if you set the proxy which affect the Windows store update.
    For more information about using authenticated proxy servers together with Windows
    8, visit the following Microsoft Web site:
    http://support.microsoft.com/kb/2778122
    Confirm the app is available in your current region;
    Make sure “Automatically update my apps” is set to Yes;
    Make sure the latest updates are installed on your PC and that your antivirus program isn't preventing the app from running.
    Make sure the app isn't blocked by Windows Firewall
    Sync your app licenses.
    Try to clear
    the Windows store cache on your PC:
    Press
    WINDOWS + R combination key, type “wsreset”, press
    Enter;
    Try to install the update again.
    Applies to: Windows 8 and Windows 8.1
    Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

    NEW
    ADK download link is unavailable
    https://dev.windows.com/en-US/featured/hardware/windows-10-hardware-preview-tools
    Working one here at the bottom of the page

  • Can I use ISE IPN without posture for VPN with Base license only?

    I'm looking at ISE licensing, and both Base and Advanced licenses have VPN listed. I could not find any document that provides guideline for VPN implementation using ISE Base license only.
    1. Can I use ISE IPN (Inline Posture Node) functionality without posture assessment with ISE Base license only? (I know it has to be ISE hardware appliance, and I know that Posture assessment requires ISE Advanced license.)
    2. Do I have to use IPN for VPN deployment using ISE as the Radius server?
    3. If I do not have to use IPN for VPN, can I use ISE for Authentication and Authorization in the same way as I use ACS?
    Thanks,
    Val Rodionov

    Val,
    There is no need to consider IPN if you are not using posturing. You can use ISE much like ACS for radius authentication for vpn users.
    If posturing is down the road and your hope is to have an architecture in place and license later, then I am sure that you can use the ipn with base licensing, however I would strongle recommend working with the PDI (for partners) for help and confirmation.
    Thanks,
    Tarik Admani
    *Please rate helpful posts*

  • Lumia 720 black- OS update issue and Apps download...

    I am using Lumia 720 Black, Everythings seems to be oky, but I cannot download apps from store, though I congfigured my Microsoft account. Nor I am able to download new software updates.
    Help me..

    Hi Anindya1903,
    Let us help you with this. Before we proceed with @Abi99's recommendation, take time to answer the questions below to isolate the issue:
    For the downloading of apps:
    • Are you unable to download any apps from the Windows Phone Store?
    • What exactly happens when you download them?
    • Is there any error message or code?
    • Which connection are you using? Wi-Fi or cellular data? Do you have a stable internet connection?
    • Were you able to browse any websites or access any internet-based apps using your phone? 
    For the software update issue:
    • Where are you located? See: Software Update for Nokia Lumia with Windows Phone 8 to know the Lumia Cyan update availability in your country.
    • What's the current OS version and firmware revision number of your phone?
    • Any error message or code when checking for an update?
    You can try checking the below links to further isolate the software update issue:
    • FAQ - What if I have trouble installing an update on my Lumia phone?
    • Solutions to update issues
    We look forward to your reply. Oh, glad to see you on the forum.

Maybe you are looking for