topic Re: Cisco ISE Profiling in Network Access Control

Cisco ISE Profiling

Arjun176 — Thu, 11 Apr 2019 15:28:57 GMT

hi,

As a testing i have three profiling for 3 different endpoint, Conference Phone(Working fine) , Printer and Camera.

i have hierarchy profiling for Printers and camera, I am be see the Printer and camera is matching the correct Authorization Policy. But in the am not able see the endpoint profile in the live logs for the Printer/Camera

In the license it show there are 2 plus license consumed. Am not sure the if the Printer/Camera profiling is working.

Is it possible to check which endpoint is consuming the plus license.

Re: Cisco ISE Profiling

Timothy Abbott — Thu, 11 Apr 2019 15:34:46 GMT

Hi,

We don't have the ability to tell you exactly which endpoint is consuming a plus license however we can give you a good idea based on the RADIUS live logs. A plus license is consumed if you use profile policy inside authorization policy. For every endpoint that matches the authorization rule using profile policy, a plus license is consumed and will continue to use it for the duration of the RADIUS session.

Regards,

-Tim

Re: Cisco ISE Profiling

Arjun176 — Thu, 11 Apr 2019 15:48:37 GMT

hi,

Yes, that is my understanding also but there are 3 profiling created and matched in 3 different Authz policies.

Profiling is working fine for Phones, i can see the Endpoint Profile for the Phones. In Radius live logs

But for Camera or Printer, In Radius live log there is no Endpoint Profile but it is matching the correct AuthZ policy.

But license consumed is 2 so am not sure profiling is working for which endpoint Camera or Printer