topic ISE-Profiling@Authentication in Network Access Control https://community.cisco.com/t5/network-access-control/ise-profiling-authentication/m-p/2134851#M184005 <P>I have two questions about ISE Profiling features .</P><P></P><UL><LI>•1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Does Authentication Process done after completing profiling ? </LI></UL><P><EM>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <BR /></EM></P><P></P><P></P><UL><LI>•2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Can profiling feature overcome mac spoofing issue&nbsp; <EM>(printer mac is used with static IP to access the network where user and printer are in same vlan&nbsp; ,user with 802.1x and printers with MAB auth) </EM>and deny windows user with spoofed printer mac and IP add?</LI></UL> Mon, 11 Mar 2019 02:50:50 GMT muhammadahmadzeeshan2006 2019-03-11T02:50:50Z ISE-Profiling@Authentication https://community.cisco.com/t5/network-access-control/ise-profiling-authentication/m-p/2134851#M184005 <P>I have two questions about ISE Profiling features .</P><P></P><UL><LI>•1)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Does Authentication Process done after completing profiling ? </LI></UL><P><EM>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <BR /></EM></P><P></P><P></P><UL><LI>•2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Can profiling feature overcome mac spoofing issue&nbsp; <EM>(printer mac is used with static IP to access the network where user and printer are in same vlan&nbsp; ,user with 802.1x and printers with MAB auth) </EM>and deny windows user with spoofed printer mac and IP add?</LI></UL> Mon, 11 Mar 2019 02:50:50 GMT https://community.cisco.com/t5/network-access-control/ise-profiling-authentication/m-p/2134851#M184005 muhammadahmadzeeshan2006 2019-03-11T02:50:50Z ISE-Profiling@Authentication https://community.cisco.com/t5/network-access-control/ise-profiling-authentication/m-p/2134852#M184035 <HTML><HEAD></HEAD><BODY><P>Authentication is performed first. CoA can happen after profiling though.. <SPAN __jive_emoticon_name="happy" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/4.5.4/images/tiny_mce3/plugins/jiveemoticons/images/spacer.gif"></SPAN></P><P></P><P>Profiling can help mitigate MAc spoofing.&nbsp; Proper VLAN assignment, dACLs will go a lot further in protecting from that specific issue.</P><P></P><P></P><DIV id="nuan_ria_plugin"><OBJECT height="0" id="plugin0" style="position: absolute; z-index: 1000;" type="application/x-dgnria" width="0"><PARAM name="tabId" value="" /><PARAM name="counter" value="" /></OBJECT></DIV></BODY></HTML> Tue, 04 Dec 2012 23:35:44 GMT https://community.cisco.com/t5/network-access-control/ise-profiling-authentication/m-p/2134852#M184035 jw.sl9 2012-12-04T23:35:44Z