topic Re: Biomed Devices profiling in Network Access Control

Biomed Devices profiling

ecanogut — Wed, 11 Oct 2017 00:44:20 GMT

Hello everyone,

One of my customer is looking for best practices for biomed devices profiling, does any one know which probe(s) can we use for this purpose? which type of information does a biomed device can send to ISE?.

Your answer is really appreciated.

thank you very much.

Re: Biomed Devices profiling

paul — Wed, 11 Oct 2017 11:31:48 GMT

ISE has the same tricks in its bag for profiling biomed devices as it does for any device:

DHCP attributes from IOS device sensor or IP helper forwarding

LLDP/CDP attributes from IOS device sensor or SNMP polling

NMAP scans

DNS reverse lookups

OUI mappings

Active Directory (wouldn't apply here)

You can take a look at the ISE Medical NAC profile library as a place to start:

Cisco ISE Medical NAC Profile Library

But really it comes down to looking at what ISE can learn about devices using its standard profiling techniques, find common attributes and crafting your profiling policies.

Re: Biomed Devices profiling

ecanogut — Wed, 11 Oct 2017 14:17:40 GMT

Hi Paul,

That makes sense from the profiling perspective, will try two or three probes and will share the results.

Thank you very much .

Regards.

Re: Biomed Devices profiling

paul — Wed, 11 Oct 2017 14:38:43 GMT

I usually run all of those profilers and see what information I learn to help develop my profiling policies.

Paul Haferman

Office- 920.996.3011

Cell- 920.284.9250

Re: Biomed Devices profiling

Craig Hyps — Thu, 12 Oct 2017 11:35:27 GMT

I also recommend reviewing the whitepaper under www.cisco.com/go/medicalnac as I explain in more detail the profiling methods currently available and their pros and cons. Stay tuned!

Re: Biomed Devices profiling

ecanogut — Thu, 12 Oct 2017 14:36:07 GMT

Alright Paul, sounds like a good strategy to get as much information as possible, Im wondering if I run all the probes the CPU load will increase considerably?

Re: Biomed Devices profiling

ecanogut — Thu, 12 Oct 2017 14:40:29 GMT

Awesome resource! Thanks a lot

Re: Biomed Devices profiling

paul — Thu, 12 Oct 2017 14:45:17 GMT

I haven’t had an issues on any of my many deployments running the profilers and collecting as much data as I can.

Paul Haferman

Office- 920.996.3011

Cell- 920.284.9250

Re: Biomed Devices profiling

ecanogut — Thu, 12 Oct 2017 15:05:56 GMT

It is good to know, let's try it and see what happen!.

Thanks again for your help.