ISE Profiling

Mike.Cifelli — Thu, 04 Apr 2019 14:59:00 GMT

I am attempting to use profiling for SDA printer identification. Basically I have a global policy (SDA_Printer) that uses IP startswith XX.XX.XX. I have created an profiled endpoint group based on this.

Then I am planning to create several child policies. For example, one I am testing out is SDA_HP_Printer:

MAC OUI Equals Hewlett Packard

My SDA HP printers are being profiled as SDA_HP_Printer as expected which means it hit on the parent & child profile condition checks. I would like to roll the MACs from all the children profile hits into the high level parent policy endpoint group so I can then use the top level in authz policy conditions. This is not working as I thought it would. Please advise.

Re: ISE Profiling

Timothy Abbott — Thu, 04 Apr 2019 19:47:53 GMT

Have you tried using a logical profile?

Regards,
-Tim

Re: ISE Profiling

Mike.Cifelli — Thu, 04 Apr 2019 23:05:21 GMT

Not yet. It is on my radar to test tomorrow. Any suggestions on best way to use them?

topic Re: ISE Profiling in Network Access Control

ISE Profiling

Re: ISE Profiling

Re: ISE Profiling