Profling OS Version

fabian.kaltenschnee — Mon, 02 Sep 2019 14:25:13 GMT

Hey,

i'm trying to profile endpoints with DHCP Probe so i can sort out all "old" Windows 7 PCs. Unfortunatley they are not part of an AD and are only MAB enabled.

With the Standard profiling policies in ISE 2.4 i only get "Windows Workstation" as an profiling result even if its a Win10 oder Win7 endpoint. So i tried to create my own policies and elements.

according to this website https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/116235-configure-ise-00.html

it took these parameters for win7

Windows Vista/7 or Server 2008

1,15,3,6,44,46,47,31,33,121,249,43
1,15,3,6,44,46,47,31,33,121,249,43,0,32,176,67
1,15,3,6,44,46,47,31,33,121,249,43,0,176,67
1,15,3,6,44,46,47,31,33,121,249,43,252
1,15,3,6,44,46,47,31,33,121,249,43,195

I also see the correct paramters but the custom policies is not used

what am i missing here to get my custom prpfiling policy to work?

thx in advance

Re: Profling OS Version

Damien Miller — Mon, 02 Sep 2019 16:20:07 GMT

Increase the certainty factory to 20 and the rule to 20 (or numbers of your choosing above 20). The microsoft workstation profile you are hitting has the same certainty factor and you need your own higher than the base. Similar to how the built in windows 7/8/10 profiles are built.

topic Re: Profling OS Version in Network Access Control

Profling OS Version

Re: Profling OS Version