topic How do I see which profile rules a device matches? in Network Access Control

How do I see which profile rules a device matches?

phonedude54956 — Thu, 11 Apr 2019 14:01:19 GMT

I have several devices that should be easily identifiable that are showing up with generic or unknown. My Samsung Galaxy S7 shows up unknown even though there is a profile for that specific device type. Many other devices like Raspberry Pi's simply show Linux Workstation or Workstation which doesn't really help much.

I also have some that show certainty score higher than what the rules would suggest. The Xerox-Workcente-7835 has 2 rules with 30 points each. But the printer, while profiled correctly, has a certainty score of 80. Where did I pick up the other 20?

Is there a way to determine which profile rules a device is matching to generate the certainty metric?

Re: How do I see which profile rules a device matches?

Timothy Abbott — Thu, 11 Apr 2019 14:28:14 GMT

You'll need to look at the device attributes then reference the profile policy checks to determine which policies are or are not being applied. Profile policy can be tuned for your specific environment based on the profile probes you have enabled on the system.

Regards,
-Tim

Re: How do I see which profile rules a device matches?

Jason Kunst — Thu, 11 Apr 2019 15:08:54 GMT

have you looked at the https://community.cisco.com/t5/security-documents/ise-profiling-design-guide/ta-p/3739456