topic Re: Manually adding endpoints to RegisteredDevices in Network Access Control

Manually adding endpoints to RegisteredDevices

GQ — Thu, 28 Sep 2017 18:40:21 GMT

Looks like registered BYOD endpoints were purged because of the default 30 day policy for a PoV. Tried to manually put their MACs back into the RegisteredDevices endpoint group (instead of 'profiled') but for some reason they still failed the Authentication because the group didn't match the policy step. Is this method supported?

Other endpoints we had them manually forget the SSID, rejoin via PEAP and kickoff another onboarding flow (acquiring certs). It would be great if we could manually put macs back into the group instead of that.

Re: Manually adding endpoints to RegisteredDevices

Thomas Wall — Thu, 28 Sep 2017 19:51:18 GMT

Gary,

Is your AuthZ rule looking for the endpoint in the RegisteredDevices group or are you trying to match on the BYOD flag for Device Registration? If the latter, can you try a bulk import of those devices and make sure you set the BYODRegistration status to Yes?

During the bulk import, new endpoints are added along with the defined attributes whereas existing endpoints will be updated. When you manually add the endpoint, you are not given the option to set the BYODRegistration field.

-Thomas

Re: Manually adding endpoints to RegisteredDevices

GQ — Thu, 28 Sep 2017 21:31:07 GMT

Yes we were matching on the BYOD flag. I'll test that out.

Would the endpoint purge clear this flag? Seems like it would if the endpoint is gone.

Re: Manually adding endpoints to RegisteredDevices

Jason Kunst — Thu, 28 Sep 2017 21:38:41 GMT

Yes it would

Re: Manually adding endpoints to RegisteredDevices

GQ — Thu, 28 Sep 2017 22:48:33 GMT

Thanks all