topic Re: Profiling Practices of IoT devices in Network Access Control

Profiling Practices of IoT devices

umahar — Wed, 03 Aug 2016 07:38:45 GMT

Hello,

We have a number of IoT sensors in our environment which needs to be profiled.

For IoT devices which have DHCP enabled we have managed to leverage DHCP option request patterns and create custom profiling policies.

However some sensors have been assigned static IP addresses.

Just wanted to know what are the practices in terms of profiling IoT devices,sensors are being followed by the ISE community if DHCP probe is not available.

Also has anyone tried to use Netflow for profiling ?

Re: Profiling Practices of IoT devices

hslai — Wed, 03 Aug 2016 13:54:15 GMT

Nothing specific to IoT. Cisco Medical NAC could be a good read for you.

Re: Profiling Practices of IoT devices

shreyiot — Sat, 23 Sep 2023 06:47:41 GMT

When DHCP probing isn't possible for IoT devices with static IPs, the ISE community employs alternative methods. These include analyzing network traffic using NetFlow, port scanning for open ports, MAC address lookups, behavior analysis, device databases, and manual profiling. Combining these techniques helps identify and profile IoT devices effectively.