topic Re: Cisco ISE Authorization Profile? in Network Access Control https://community.cisco.com/t5/network-access-control/cisco-ise-authorization-profile/m-p/4602382#M574434 <P>Not ideal, but I think you can create a specific profile for those device not recognized properly.</P><P>&nbsp;</P><P><A title="https://community.cisco.com/t5/security-documents/how-to-create-ise-network-access-device-profiles/ta-p/3631103" href="https://community.cisco.com/t5/security-documents/how-to-create-ise-network-access-device-profiles/ta-p/3631103" target="_self">https://community.cisco.com/t5/security-documents/how-to-create-ise-network-access-device-profiles/ta-p/3631103</A>&nbsp;</P> Fri, 29 Apr 2022 11:40:31 GMT Flavio Miranda 2022-04-29T11:40:31Z Cisco ISE Authorization Profile? https://community.cisco.com/t5/network-access-control/cisco-ise-authorization-profile/m-p/4602375#M574433 <P>I've a couple of devices which are manually added to Cisco ISE (version 2.3.0.298).<BR />They are statically assigned to identity group "MAB-VLAN199".<BR />All the devices are matched to authorization profile "AUTH-VLAN199".<BR />But one device is shown in the ISE logs with "AUTH-VLAN199-VENDOR", it seems it attaches the vendor name to the auth-profile.<BR />But there is no such profile, so the result is the profile "VLAN199-UNTRUST" which loads an DACL and this ACL blocks.<BR />I've no idea what is going on here?<BR />Any suggestions?<BR />Thanks.<BR />Unfortunately the guy who configured the ISE already resignated...</P> Fri, 29 Apr 2022 11:32:03 GMT https://community.cisco.com/t5/network-access-control/cisco-ise-authorization-profile/m-p/4602375#M574433 Chris.Mes 2022-04-29T11:32:03Z Re: Cisco ISE Authorization Profile? https://community.cisco.com/t5/network-access-control/cisco-ise-authorization-profile/m-p/4602382#M574434 <P>Not ideal, but I think you can create a specific profile for those device not recognized properly.</P><P>&nbsp;</P><P><A title="https://community.cisco.com/t5/security-documents/how-to-create-ise-network-access-device-profiles/ta-p/3631103" href="https://community.cisco.com/t5/security-documents/how-to-create-ise-network-access-device-profiles/ta-p/3631103" target="_self">https://community.cisco.com/t5/security-documents/how-to-create-ise-network-access-device-profiles/ta-p/3631103</A>&nbsp;</P> Fri, 29 Apr 2022 11:40:31 GMT https://community.cisco.com/t5/network-access-control/cisco-ise-authorization-profile/m-p/4602382#M574434 Flavio Miranda 2022-04-29T11:40:31Z Re: Cisco ISE Authorization Profile? https://community.cisco.com/t5/network-access-control/cisco-ise-authorization-profile/m-p/4602395#M574436 <P>Thanks, now I've found it. Under PolicySets there was an old rule for exactly this MAC-address which results to profile "VLAN199-UNTRUST".</P> Fri, 29 Apr 2022 12:01:33 GMT https://community.cisco.com/t5/network-access-control/cisco-ise-authorization-profile/m-p/4602395#M574436 Chris.Mes 2022-04-29T12:01:33Z