topic Re: ISE MDM integration in Network Access Control

ISE MDM integration

Qingguo Zhang — Tue, 08 Jan 2019 15:25:46 GMT

Hello experts

I am testing ISE - Intune integration in LAB . after ISE integrated with Intune successfully and

registered a few device using intune account. it also shows correctly on Intune as below.

When I tested ISE MDM policy to query registered and compliant status , it seems not completed and "forbidden" on intune..

2019-01-08 20:23:04,354 INFO [Thread-23907][] cisco.cpm.mdm.util.MdmRESTClient -::::- GET: MDM Server URL: https://fef.msuc01.manage.microsoft.com/StatelessNACService/ciscoise/mdminfo/?ise_api_version=2
2019-01-08 20:23:04,354 DEBUG [Thread-23907][] cisco.cpm.mdm.util.MdmRESTClient -::::- Proxy Config in request = [,null,-1,nullnullnull]
2019-01-08 20:23:05,097 INFO [Thread-23907][] cisco.cpm.mdm.util.MdmRESTClient -::::- MDM Server Response Code: 200

Any comments is appreciated.

Re: ISE MDM integration

Jason Kunst — Tue, 08 Jan 2019 15:33:13 GMT

Are you configured per the guide and notes out there?

http://cs.co/ise-guides
https://community.cisco.com/t5/security-documents/ise-security-ecosystem-integration-guides/ta-p/3621164#toc-hId-1605897512

Re: ISE MDM integration

Qingguo Zhang — Tue, 08 Jan 2019 15:37:49 GMT

Yes, I followed the guide . but the guide is a little out of date and some portal has changed on intune.

Re: ISE MDM integration

Jason Kunst — Tue, 08 Jan 2019 16:02:13 GMT

I would recommend also you reach out to intune as well, TAC if all else fails. I will query our SME if they have anything to add

Re: ISE MDM integration

Nidhi — Thu, 10 Jan 2019 15:29:16 GMT

As Jason suggested, Please raise a TAC case. There could be permission issues with the query which should be isolated.

Thanks,

Nidhi