Use the Test Connection feature in the Cisco ISE External Identity Sources Active Directory.

View the Active Directory Log /opt/CSCOcmp/logs/ad_agent.log.

Use the ISE Dashboard Summary alarms.

Use ktpass to determine if the Kerberos ticket is valid.

A license is installed on the Policy Service node within ISE deployment.

A license is installed on the primary or secondary Administration node within ISE deployment.

A license is installed only on the primary Administration node within ISE deployment.

A license is preinstalled for ISE deployment.

In the event of failure of the Primary Administration node, the standby instance automatically becomes active.

In the event of failure of the Primary Monitoring node, the standby instance automatically becomes active.

Clustering of Policy Service nodes to provide N+1 redundancy

Stateless failover of Inline Posture nodes

employee

contractor

activated guest

guest

sponsor

EAP-TLS-based authentication

EAP-MS-CHAPv2-based authentication

accurate posture assessment results

Active Directory integration

consistent profiling data collection

accurate and reliable logging