Migrate Printer to SD-Access and cannot open in the browser

[khalilsoltani47714]

I migrated the printers to new SD-Access network

Printer type kyocera connected to Fabric domain ""No authentication""

in my desktoop printer is pingable but cannot open in the browser

in traditional networks I manage to access but now no

[balaji.bandi]

Do you ISE in Place for dot1.X authentication ? Does your PC and printer in same VN ? do you have any policies for http access restrictions ?

[khalilsoltani47714]

yes i have ise , but now my desktop and printer in the same VN and no authentication -not used ISE now for this action 

my desktip in the sgt X and printer in the SGT Y is pingable 

and cannot open in the browser, 

[balaji.bandi]

SD-Access have Macro and Micro segement (not sure how your setup configured)

i would check this below steps :

1. Connect PC back to back cable with out switch connection ? is the Webpage opens ? - YES

2. this proves that there is a policy Micro segement which is preventing this access.

3. what you see in ISE event logs.

Note : May be Only ping allowed, may be worth checking the matrix again.