topic Re: Cisco ISE Device Profiling in Network Access Control

Cisco ISE Device Profiling

jitendrac — Tue, 29 Aug 2023 17:46:48 GMT

Hi All,

Is there any list available where we can see which built-in device profiles are supported in the ISE 3.2 or 3.3 version? For example which Medical Devices, IOT Devices, and Industrial control systems Profiles are supported?

Also is there any limitation on the number of default device profiles that can be imported and used in the device profile policy?

Re: Cisco ISE Device Profiling

Damien Miller — Tue, 29 Aug 2023 23:25:30 GMT

I have not seen this list published anywhere, the only option I'm aware of is to go to the ISE deployment itself, or a Dcloud instance such as this 3.2 instant on.

https://dcloud2-sjc.cisco.com/content/instantdemo/cisco-identity-services-engine-ise-3-2-instant-demo-preview?returnPathTitleKey=content-view

As far as a limitation and scaling for the number of endpoint profiles, I'm not aware of that number being published for any supported release. The old medical profile library page indicated no more than 2000 had been tested.
https://community.cisco.com/t5/security-knowledge-base/cisco-ise-medical-nac-profile-library-v2-0/ta-p/3638736#:~:text=The%20maximum%20number%20of%20profiles,2.1%20and%20above%20is%202000.

Re: Cisco ISE Device Profiling

Greg Gibbs — Wed, 30 Aug 2023 01:46:17 GMT

Just to add to Damien's response... while ISE has limited capability for profiling Medical, IoT, and Industrial IoT endpoints due to the limited information provided by the network, ISE integrates with multiple other Cisco and 3rd-party vendor solutions (e.g. Medigate, Ordr, CyberVision, Nozomi, and many others) that can provide more details to ISE that can be used as matching conditions in Authorization Profiles.

For more information, see https://www.cisco.com/c/en/us/products/security/identity-services-engine/technology-partners.html

Re: Cisco ISE Device Profiling

jitendrac — Wed, 30 Aug 2023 11:08:06 GMT

Hi Thanks for information,

i can see that there is an option to Download the Medical NAC library ZIP file and then import it is cisco Work Centers > Profiler > Profiling Policies

just wanted to know from where we can download Medical Type of devices NAC library or OT specific NAC library. Will i have to ask respective OEM ?

Re: Cisco ISE Device Profiling

jitendrac — Wed, 30 Aug 2023 11:34:38 GMT

Ok I think i got where i should look
"The Feed Service Partner Portal".

I hope our partner's login request will get approved to access it and to contribution

Re: Cisco ISE Device Profiling

hslai — Fri, 01 Sep 2023 04:19:37 GMT

@jitendrac Please check out the Cisco or 3rd-party solutions that Greg indicated above. Usually the solution will profile the endpoints and then share the data with ISE via pxGrid context-in.