ISE 2.1 and Scrutinizer integration issue

Scrutinizer is an enterprise/business class NetFlow and sFlow analysis tool. Scrutinizer provides historical trends of the company's critical network interfaces as well as the details on:

Who: The end system causing the traffic
What: The application/protocol that is being used
When: The time frame it has been occurring for
Where: The network connection that is affected

Moderators: scottr, Moderator Team

Post Reply
aswanson
Posts: 3
Joined: Mon Oct 05, 2015 11:42 am

ISE 2.1 and Scrutinizer integration issue

Post by aswanson » Fri Feb 03, 2017 2:14 pm

Hello

I'm running scutinizer 16.11.1565721 with Advanced Reporting and Flow Analytics licencing. I followed the documentation to integrate Scrutinizer with ISE 2.1.0.474.

I have ERS enabled (read only) with an account setup as per the instructions. I configured Scrutinizer using scrut_util.exe to point to the secondary PAN/MnT node in my deployment.

When I go to Status > Views > usernames I can see all the ISE Active Connections for MAB/802.1x

There is currently only one connected 802.1x device - a domain joined PC with windows 7 supplicant set to machine or user authentication. It is authenticated to ISE successfully with its machine account but in Scrutinizer its username/datasource is displayed as:

username: <scrutinizer administrator account name>
datasource: 127.0.0.1: username

Any ideas on how to pull the correct 802.1x username from ISE?

Thanks
Andy

Post Reply

Who is online

Users browsing this forum: No registered users and 2 guests