topic Re: Endpoint not hitting right profile in Network Access Control

Endpoint not hitting right profile

gjw_csco — Fri, 15 Jun 2018 13:58:01 GMT

I'm running through a POV with a customer. They've built two profiler conditions specifying:

- AD-Host-Exists

- AD-Join-Point

(both of these are using the ACTIVEDIRECTORY_PROBE type)

These are used in a custom profiler policy where the minimum certainty factor is say 1000. Each condition increase the factor by 500.

This profiler policy is then specified in a logical profile and then used in a AuthZ profile similar to this:

The customer endpoint is not being profiled properly - first it was coming up as a Nortel device. I went in and disabled that profiling policy, and now it's being profiled as a Microsoft-Workstation. We need it to be profiled as "Corporate Devices - Profiled"

I confirmed that the two attributes for the profiler conditions are listed under our test endpoint in Context Visibility > Endpoints.

Any ideas why this is happening and how we can get these endpoints profiled correctly?

Appreciate the help.

Re: Endpoint not hitting right profile

Craig Hyps — Fri, 15 Jun 2018 20:33:27 GMT

show copy of attributes and profile policy along with details on constituent conditions used in the policy rules.

Re: Endpoint not hitting right profile

ldanny — Sun, 17 Jun 2018 08:24:50 GMT

also you might want to try running a debug on prrt-server.log and profiler.log to get a better understanding of whats going on.

Re: Endpoint not hitting right profile

ldanny — Wed, 20 Jun 2018 07:30:07 GMT

Please provide input