- Print
- DarkLight
- PDF
Article summary
Did you find this summary helpful?
Thank you for your feedback
Please check the following for potential misconfigurations:
ERS API validation fails
- Check the ers-xtendise user credentials
- Check the ERS API IP address configurations - the IP address should be the IP address of the Primary Policy Administrations Node in your ISE deployment.
- Check if ERS API is enabled
- Check the connectivity issue - open a web browser on the XTENDISE server and open the following address https://<ERS_API_IP_address>:9060/ers/sdk - the web browser should ask for credentials (Use the ers-xtendise user to access the ERS API SDK). If the browser fails to open the web page, check the connectivity between XTENDISE and PAN ISE node on the port TCP/9060.
ERS MNT validation fails
- Check the mnt-xtendise user credentials
- Check the MNT API IP address configurations - the IP address should be the IP address of the Primary Monitoring Node in your ISE deployment.
- Check the connectivity issue - open a web browser on the XTENDISE server and open the following address https://<ERS_API_IP_address>/admin/API/mnt/Session/ActiveCount - the web browser should ask for credentials (Use the mnt-xtendise user to access the ERS API SDK). If the browser fails to open the web page, check the connectivity between XTENDISE and MNT ISE node on the port TCP/443.
User Access validation fails
- Check the XTENDISE account credentials in your Active Directory
- Check the connectivity issue - open a command line and try to open telnet session on the port TCP/389 or TCP/636 to the configured domain controller.
- Make sure that that the user you are testing is a member of the XTENDISE Administrator AD group.