ISE Profiling

BigK — Tue, 10 Dec 2019 21:38:00 GMT

hello,

I was wondering why my endpoints profile shows as the machine vendor name instead of the OS Like ( Windows 7 or 10 )

Re: ISE Profiling

andrewswanson — Tue, 10 Dec 2019 23:14:21 GMT

Your devices have been successfully profiled as dell devices ( because their MAC OUI contains Dell).

To be profiled as Windows 10/7 requires ISE to collect more attributes (from other probes) for these devices.

ISE profiling policies are listed under Policy > Profiling > Profiling Policies and the conditions for these policies under Policy > Policy Elements > Conditions > Profiling.

e.g. to profile the devices as Microsoft-workstation, you could configure the ISE DHCP probe to collect the required dhcp attribute - to get to a specific OS may require an nmap scan

hth
Andy

Re: ISE Profiling

BigK — Wed, 11 Dec 2019 14:34:43 GMT

@andrewswanson
Ty for the info.

topic ISE Profiling in Network Access Control

ISE Profiling

Re: ISE Profiling

Re: ISE Profiling