https://community.cisco.com/t5/network-access-control/ise-and-mdm-integration-behavior/m-p/3775238#M486497 <P>I have a customer that would like to integrate Airwatch with ISE. The only criteria is to check if the device is registered. My question is in the event of the MDM service is unavailable, say for maintenance purposes, what happens to existing users that are already authenticated ? Does ISE periodicaly re-authenticate with the already re-authenticated devices ?</P> <P>Does the Polling Interval disable these checks ?</P> <P>Thanks,</P> <P>Ed</P> Tue, 08 Jan 2019 16:31:30 GMT erajca 2019-01-08T16:31:30Z https://community.cisco.com/t5/network-access-control/ise-and-mdm-integration-behavior/m-p/3775238#M486497 <P>I have a customer that would like to integrate Airwatch with ISE. The only criteria is to check if the device is registered. My question is in the event of the MDM service is unavailable, say for maintenance purposes, what happens to existing users that are already authenticated ? Does ISE periodicaly re-authenticate with the already re-authenticated devices ?</P> <P>Does the Polling Interval disable these checks ?</P> <P>Thanks,</P> <P>Ed</P> Tue, 08 Jan 2019 16:31:30 GMT https://community.cisco.com/t5/network-access-control/ise-and-mdm-integration-behavior/m-p/3775238#M486497 erajca 2019-01-08T16:31:30Z https://community.cisco.com/t5/network-access-control/ise-and-mdm-integration-behavior/m-p/3775453#M486498 <P>In Authz Policy create rule on top as below</P> <P>&nbsp;</P> <P>MDM·MDMServerReachable equals unreachable </P> <P>&amp;&amp;</P> <P>AD: External groups equals&nbsp; Domain Users</P> <P>&nbsp;</P> <P>Give&nbsp; them permit access</P> <P>It will counter all your scenarios.</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> Tue, 08 Jan 2019 20:56:36 GMT https://community.cisco.com/t5/network-access-control/ise-and-mdm-integration-behavior/m-p/3775453#M486498 Parag Mahajan 2019-01-08T20:56:36Z