topic Re: policy-set internal user in MAB in Network Access Control

policy-set internal user in MAB

athan1234 — Mon, 07 Mar 2022 19:47:59 GMT

I am checking on ISE the polycy-set on MAB

I try to understand the profiling. I want to classify all of them endpoints unknown. I am watching videos , and all of them having an internal endpoint in MAB.

It is correct to have internal user in MAB? Does that make sense?

Best regards

Re: policy-set internal user in MAB

Rob Ingram — Mon, 07 Mar 2022 20:12:43 GMT

@athan1234 when a device is profiled, the endpoint is added to the ISE Internal Endpoints datastore, not internal users.

Re: policy-set internal user in MAB

athan1234 — Mon, 07 Mar 2022 22:44:07 GMT

Hi @Rob Ingram thanks for your reply and clarification.

So regarding policy-set : what is the difference when you put internal user or endpoint ?.

Re: policy-set internal user in MAB

Rob Ingram — Tue, 08 Mar 2022 07:41:18 GMT

@athan1234 the "Internal User" and "Internal Endpoints" are different databases, so the Policy Set would check to see if the user or endpoint existed in the specified database.

All endpoints are by default added to the Endpoints database when they are profiled by ISE. If you manually create a local ISE user this account is stored in the "Internal Users" database.

Re: policy-set internal user in MAB

athan1234 — Wed, 09 Mar 2022 11:59:06 GMT

So Thanks @Rob Ingram I understand .

Re: policy-set internal user in MAB

athan1234 — Thu, 10 Mar 2022 10:57:47 GMT

@Rob Ingram sorry one question more

why do I can not see endpoints ? only I am able to see user

Re: policy-set internal user in MAB

Rob Ingram — Thu, 10 Mar 2022 09:13:09 GMT

@athan1234 those MAC addresses in your screenshot are endpoints not users.

Re: policy-set internal user in MAB

athan1234 — Thu, 10 Mar 2022 11:07:22 GMT

hi @Rob Ingram Sorry I chose other pic please check now

Re: policy-set internal user in MAB

Rob Ingram — Thu, 10 Mar 2022 13:27:04 GMT

@athan1234 you won't have any users until you specifically configure internal users.