ISE and MDM Integration behavior

[erajca]

I have a customer that would like to integrate Airwatch with ISE. The only criteria is to check if the device is registered. My question is in the event of the MDM service is unavailable, say for maintenance purposes, what happens to existing users that are already authenticated ? Does ISE periodicaly re-authenticate with the already re-authenticated devices ?

Does the Polling Interval disable these checks ?

Thanks,

Ed

[Parag Mahajan]

In Authz Policy create rule on top as below

MDM·MDMServerReachable equals unreachable

&&

AD: External groups equals  Domain Users

Give  them permit access

It will counter all your scenarios.