topic As far as I know it's not in Network Access Control

Is it possible to disable profiling (ISE 2.1) for a specific Wireless SSID?

ciscotac16 — Mon, 11 Mar 2019 07:33:08 GMT

Hello!

Is it possible within ISE 2.1 to limit profiling to certain SSIDs only? (Specifically, the request is to disable it on a Guest SSID, while leaving it enabled on all others.)

Thank you,

Deb

As far as I know it's not

Marvin Rhoads — Thu, 16 Mar 2017 05:12:33 GMT

As far as I know it's not possible in ISE, even with 2.2.

Hi, Marvin.

ciscotac16 — Thu, 16 Mar 2017 21:38:26 GMT

Hi, Marvin.

Thanks for taking the time to respond.

I have also opened an SR with TAC, and if there's any different news from there I'll post it here.

Regards,

Deb

On the WLC your enable

Angel Castillo — Fri, 17 Mar 2017 05:16:42 GMT

On the WLC your enable profiling on each SSID (wireless >> SSID >> advanced options)

Angel - that's a good

Marvin Rhoads — Fri, 17 Mar 2017 07:49:40 GMT

Angel - that's a good suggerstion.

Correct me if I'm wrong, but that would only cover the Device Sensor aspect of profiling which supplements the normal RADIUS accounting information with that collected locally by the WLC. All of the other probe types enabled on the ISE deployment would continue to attempt to profile the endpoints on the SSID even on the WLANs with local profiling not enabled.

Yes, RADIUS probe only

Angel Castillo — Fri, 17 Mar 2017 08:08:26 GMT

Yes, RADIUS probe only ... but for example, he can desactive the ip helper on the respective interface VLAN of SSID also (desactive DHCP Probe)