topic ISE problem with BYOD smart solution... in Network Access Control

ISE problem with BYOD smart solution...

jiyoung Kim — Mon, 11 Mar 2019 02:57:46 GMT

I did all configurations in the byod smart solution.

and I was curious.....how they idenfity OS of devices...

I wanted to use 'Session:Devices-OS' ... but it seems not to work..

Also,

I want to profile self-registered devices. so if someones register their iPad2 or iPhone,

I want them to profiled in Mobile under the RegisteredDevices ( I was able to create a group called Mobile under the RegisteredDevices).

and I want to use this identity group when I create authorization rules.

is there any way to do it??

Hope this is clear enough to be understood.

thank you.

Best regards.

Justin

ISE problem with BYOD smart solution...

Tarik Admani — Fri, 11 Jan 2013 17:04:49 GMT

Hi,

The following thread covers the answer you are after.

https://supportforums.cisco.com/message/3744919#3744919

Basically the device-os attribute is satisfied through posturing or using nmap. Not through http/dns/dhcp profiling.

thanks,

Tarik Admani
*Please rate helpful posts*

ISE problem with BYOD smart solution...

jiyoung Kim — Mon, 14 Jan 2013 00:44:14 GMT

then how does ise know client's OS on client provisioning phase....?

in the smart solution, they have different resources..

can we use this information for authorization ??

ISE problem with BYOD smart solution...

Tarik Admani — Mon, 14 Jan 2013 00:59:49 GMT

You may need to open a tac case for confirmation, but I think the ISE learns the information from the user agent string that is learned from when the client is redirected to the ISE portal to download the nac agent.

Thanks,

Tarik Admani
*Please rate helpful posts*