topic Re: ISE Endpoint Profiling Query in Network Access Control

ISE Endpoint Profiling Query

chriskilian — Fri, 21 Feb 2020 18:58:49 GMT

Hi All,

Is there a section in ISE whereby you can see log details on how a endpoint has been profiled. Having some issues whereby devices are being profiled correctly sometimes and not others. Keen to see if there is a section anyplace whereby you can see what rules have bee triggered to increase the certainty factor and thereby giving the device the profile.

The device I am having is with Samsung Galaxy phones being correctly identified certain times but other times just being profiled as "Workstation"

Thanks

Chris

Re: ISE Endpoint Profiling Query

agrissimanis — Thu, 21 Jun 2018 11:34:26 GMT

A lot of profiler activity is logged in the endpoint debug logs. Access to the endpoint debug menu differs between ISE versions, which version do you use?

There is also the "Profiled Endpoints Summary" report, which has quite a lot of detail, but I think that report is not presented very well, you have to click around a lot to find useful info

Re: ISE Endpoint Profiling Query

chriskilian — Thu, 21 Jun 2018 12:03:37 GMT

Running ISE 2.2.

Re: ISE Endpoint Profiling Query

agrissimanis — Thu, 21 Jun 2018 12:50:29 GMT

Have a look at this guide, but basically you can enable Endpoint debug from here - Operations > Troubleshoot > Diagnostic Tools > General Tools > Endpoint Debug.