topic Re: Cisco ISE or MacOS in Network Access Control

Cisco ISE or MacOS

Saeed Abd Elhalim Hamada — Mon, 11 May 2026 17:34:26 GMT

Dears

i`m have customer use Do1x (wirless) user + Machine Auth using (TEAP (Mschap for user , TLS for machine )) << for windows (no posture no cisco any connect )

now he need to apply cisco ise for 8- 10 laptops (wirless) with Mac OS like the Windows os

so is there any guides or article or anything to make this ?

Re: Cisco ISE or MacOS

aleabrahao — Mon, 11 May 2026 17:47:11 GMT

Take a look at this.

https://community.cisco.com/t5/network-access-control/machine-user-auth-for-mac-osx/td-p/3471203

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/214975-configure-eap-tls-authentication-with-is.html

Re: Cisco ISE or MacOS

ahollifield — Tue, 12 May 2026 23:13:03 GMT

Do you have an MDM? If not that's step one for MacOS.

Re: Cisco ISE or MacOS

Saeed Abd Elhalim Hamada — Wed, 13 May 2026 01:49:07 GMT

no i dont have MDM

Re: Cisco ISE or MacOS

Karsten Iwen — Wed, 13 May 2026 06:28:39 GMT

As @ahollifield already mentioned, an MDM would be the best solution. For this little amount of devices, the administrativ burden to implement one is perhaps too large. When there is no MDM, I use the tool dot1xProfile from ermitacode to generate a profile which can be installed manually on the device.

Re: Cisco ISE or MacOS

ahollifield — Wed, 13 May 2026 11:58:56 GMT

Step 1 is an MDM. Without an MDM, properly configuring MacOS is not scalable and a nightmare.