topic Re: ISE 2.1 - Policy updates and activation time & Browser support in Network Access Control

ISE 2.1 - Policy updates and activation time & Browser support

mhandfor — Thu, 22 Sep 2016 13:49:37 GMT

Hi All,

My customer is running the latest version of ISE and is encountering two issues :

BYOD on boarding – Unsupported browser on Apple device running IOS 10, Windows Mobile. I am also seeing this when I use my macbook.
Policy updates don’t update straight away. Can take over 30 minutes

Please could someone advise what the browsers and OS’s ISE 2.1 supports for BYOD on-boarding and for the policy update issue is there a default timer that delays policy updates being pushed out to the PSN’s and subsequently the clients.

Thanks Mat.

Re: ISE 2.1 - Policy updates and activation time & Browser support

hslai — Thu, 22 Sep 2016 21:58:40 GMT

I just tried it on my own device with Apple iOS 10.0.1 and BYOD on-boarding went fine.

Assuming all wireless connections, is it enabled to by-pass captive portal? ISE is currently not supporting the mini/pseudo browsers for BYOD use cases. If that is not the case, please open a TAC case to troubleshoot further.

Supported Operating Systems and Browsers for Sponsor, Guest, and My Devices Portals has the supported info. Neither macOS Sierra or Apple iOS 10 there yet, as they are released only last week and our teams are still verifying them.

Re: ISE 2.1 - Policy updates and activation time & Browser support

hslai — Thu, 22 Sep 2016 22:07:26 GMT

On your second point, please check ISE profiling configured as recommended for production use. For example, [ EndPoint Attribute Filter ] should be enabled to reduce un-needed replications. If that does not help, again, please contact TAC.