“Could you please check whether do you have PLUS or not ? if don’t have PLUS license ,then check profile service option is enabled from GUI or not ?
If it is enabled ,then disable it and try to delete to it ,then it will work fine .”
I’d suggest using the Context Visibility > Endpoints menu for the two issues you are having. It was revamped in ISE 2.1 and is a great one stop location for ascertaining and modifying endpoint attributes.
Aug 24, 2017
- Cisco Identity Services Engine (ISE) 3300 Series Appliances
Known Affected Releases
2.0(0.901) 2.0(0.902) 2.0(0.903) 2.1(0.474) 2.2(0.902)
Unable to remove endpoint from endpoint group (using endpoint group tab).
For endpoint with Static Group Assignment equal True removing is only changing value to false.
For endpoint with Static Group Assignment equal removing option is disabled.
“I believe the issue is related to a difference in what is stored in Context Visibility as opposed to what is stored in the ISE endpoint database. This could be related to CSCvf22318 or simply the fact that you learned endpoints which are displayed in Redis but not persisted in ISE endpoint database due to lack of Plus license with Profiling support. To see what is in the Endpoint DB, you can run the “Get All Endpoints” command from “application configure ise” menu, or else leverage the Endpoint Analysis Tool available at iseeat.cisco.com (be sure to register with company email, not personal — the email is not used for marketing, but to verify valid customer).
Unknown and Profiled are placeholder ID groups for endpoints which have not been assigned an explicit Endpoint Identity Group.
Endpoint analysis tool.