ISE NMAP SCAN Profiling

Arjun176 — Wed, 08 May 2019 12:26:07 GMT

hi,

I wanted to create profiling for printers and access devices. Am not able to get any attributes from the various probes configured.

So i decided to create nested profiling policy, parent policy with OUI and MAC address as the condition and enable NMAP Scan action, and Create Child condition using NMAP scan action to match the OS , Ports used.

I understand NMAP scan is not the preferred option for profiling, What could be the issue ISE is not able to learn the attributes using the SNMP or other probes.

What should be CF value in the parent policy and child policy.

Re: ISE NMAP SCAN Profiling

Mike.Cifelli — Wed, 08 May 2019 12:45:47 GMT

You should be able to get attributes from from your access devices. Have you properly configured your devices? Your CF value needs to be higher than the default Cisco built policies. Can you share your NAD configs?

topic Re: ISE NMAP SCAN Profiling in Network Access Control

ISE NMAP SCAN Profiling

Re: ISE NMAP SCAN Profiling