topic Scanning client device for profiling details in Network Access Control

Scanning client device for profiling details

scsc_tech — Thu, 11 Apr 2019 14:16:19 GMT

I am hoping to build up my profiling policies to use some more criteria than just MAC address, for obvious security reasons.

Can anyone recommend a piece of software that can scan a client device and get profiling details like DHCP, LLDP, CDP, user-agent, etc? Or is there a place in ISE that I can get these details?

Thanks

Re: Scanning client device for profiling details

Timothy Abbott — Thu, 11 Apr 2019 14:30:06 GMT

Have you tried using the ISE EAT tool? Its a free tool that allows you to pull all profiling data from ISE and will help you build better profile policies.

Regards,
-Tim

Re: Scanning client device for profiling details

scsc_tech — Thu, 11 Apr 2019 14:33:59 GMT

I have not, Ill look into that right now!

Re: Scanning client device for profiling details

scsc_tech — Thu, 25 Apr 2019 22:03:05 GMT

I gave the ISE EAT tool a try and unfortunately the results are very lackluster.

In most cases the clients only had the MAC address column populated. That doesnt give me much more to profile on than I already had at my disposal.

When running show cdp neighbors detail or show lldp neighbors detail, I get far more information to profile on. Its just time consuming doing this manually