Symptom
ISE Application server will crash and stuck initializing/not running after a successful TCP handshake with a secure syslog server.
This happened due to an issue building the Client hello. where ISE tries to check its trust chain.
Conditions
-not limited to ISE 3.1 patch 7. Other patches faced the issue as well
-any node that joins the deployment will face the issue if it starts the TCP handshake with Syslog server.
-de registering the node will carry the defect symptoms (crash will be seen when it is standalone)
-the TLS handshake will not be reached. (syn, syn/ack, ack) is enough
Workaround
-fix to be implemented.
-we have to block communication with secure syslog server, or disable it. Node will get up, a reload might be needed.
Further Problem Description