topic Re: How to Profile Devices configured Static IP Addresses in Network Access Control

How to Profile Devices configured Static IP Addresses

palv — Sun, 04 Aug 2019 15:56:35 GMT

Team,

Needs your suggestion, which probes should be used to profile Devices in below mentioned scenarios?

a) Profile Devices for CCTV Cameras configured with Static IP address?

a) Profile Devices for Biometric Fingerprint devices, Badge reader configured with Static IP Address & also they are Silent Host?

Note: Customer does not want to profile using MAC OUI or Whitelisting (manual adding mac-address into ISE) due to admin effort?

Re: How to Profile Devices configured Static IP Addresses

Mike.Cifelli — Mon, 05 Aug 2019 11:43:11 GMT

IMO you have a couple of options. If you use a standard naming convention or a specific network range you could profile based on either of them. Some will argue it is a bit of a cheat, but it will work. As far as the admin effort to profile based on MAC OUI you could create profile and automatically assign the MACs to your endpoint group. Another idea is to use a script to leverage ISE APIs to automate placement of MACs. Good luck & HTH!

Re: How to Profile Devices configured Static IP Addresses

Surendra — Mon, 05 Aug 2019 12:17:24 GMT

You can use NMAP as well.