Symptom

On ISE 2.4, base version and p13, issuing a cat /proc/sys/net/netfilter/nf_conntrack_udp_timeout is giving a different output than what this flag has as the value by defect under /etc/sysctl.conf When restarting or reloading ISE, this value doesn't get updated under nf_conntrack_udp_timeout. This value doesn't update when modifying ISE's GUI variables either.

Conditions

ISE 2.4

Workaround

Modifying the flag value on /etc/sysctl.conf and then reloading/restarting ISE.

Further Problem Description