topic Re: Cisco ISE OUI Database in Network Access Control

Cisco ISE OUI Database

HansK_NL — Mon, 14 Nov 2022 08:50:12 GMT

I'm subscribed to the feed service and receive a weekly update to profiler feed service changes from Cisco.

Over the last weeks I noticed there have been no updates at all in this area. (last update was August 6th 2022)

The ISE endpoint database lists a over 3000 endpoints with OUI=Unknown (mostly wireless devices).

Looking at the OUI vendor CSV at https://maclookup.app/downloads/csv-database, it's easy to see there are over 900 updates listed to MAC/Vendor values since August 2022.

How can I be sure that ISE is up-to-date with respect to the OUI Vendor database?

Re: Cisco ISE OUI Database

Mark Elsen — Mon, 14 Nov 2022 10:18:29 GMT

- What's your ISE version ?

Re: Cisco ISE OUI Database

HansK_NL — Mon, 14 Nov 2022 10:23:40 GMT

My version is ISE 3.0 patch 5

Re: Cisco ISE OUI Database

Bwilson13 — Mon, 14 Nov 2022 19:35:24 GMT

I'm having the same issue as well with ISE 3.1 cluster.

Re: Cisco ISE OUI Database

Arne Bier — Mon, 14 Nov 2022 21:02:07 GMT

This area of ISE is not well looked after in general. I have been trying to get hold of someone for many months to change my Partner details in ise.cisco.com/partner website (which is part of all this stuff) and there is no action at all. As if nobody knows how it even works anymore. Apart from the fact that the portal looks like it was coded in 1984. I wish Cisco would spend a little time to keep this up to date.

Re: Cisco ISE OUI Database

ahollifield — Mon, 14 Nov 2022 23:16:54 GMT

+1 ^^^^

I find the Aruba ClearPass Fingerprint update service to be maintained much more often than ISE. Albeit it is much more closed off and doesn't offer the ability to submit profile updates to it from the field like ISE (used to?).

Re: Cisco ISE OUI Database

hslai — Sun, 20 Nov 2022 00:48:04 GMT

I am checking with our teams on this.

Re: Cisco ISE OUI Database

Bwilson13 — Tue, 22 Nov 2022 15:28:15 GMT

Please let us know what you find. I think this may have some potential affect on my ISE cluster's ability to profile new devices on my network.

Thanks,

Bruce

Re: Cisco ISE OUI Database

Bwilson13 — Thu, 05 Jan 2023 21:11:11 GMT

I wanted to post an update on this thread. On 12/16 the feed profile service started working again.

See the results:

Feed OUI 680 added.
Feed OUI 105 updated.

My 3.1 cluster has continued to receive OUI updates since then.

Re: Cisco ISE OUI Database

HansK_NL — Fri, 06 Jan 2023 12:35:35 GMT

@Bwilson13, it seems you're right! I did not receive the weekly summary mails recently, so I cannot fully confirm your findings. But based on the change audit reports in ISE, I do see a lot of OUI additions and changes over the last couple of days.

@hslai, thank you for reaching out to the responsible teams!