Cisco ISE and Intune misreporting

[adam.burley@uk.gt.com]

Good afternoon

We are experiencing an issue and wanted to see if anyone had had a similar experience.
We have ISE version 3.2 patch 7 and have integrated with Intune MDM.  The ISE rule requires the device to be both registered and compliant with Intune, and if either condition is not met then to deny network access.  
The majority of the time this works correctly, but we are seeing an increasing number of occasions where ISE is reporting the device as not registered/non-compliant despite Intune showing them as compliant, or vice versa.
We are not sure whether this is Intune providing the incorrect information, or ISE not updating the status.

If anyone has experienced similar and has a resolution it would be much appreciated

[Leo Laohoo]

Did the issues started on 11 February 2025? 

If it did, please refer to:  FN74227 - Cisco Identity Services Engine: Authentication and Certificate-Based Logins Will Fail Due to Microsoft Intune Security Identifier Changes

[adam.burley@uk.gt.com]

Thank you for the reply Leo.  This issue has been going on for some time, and we have already installed patch 7 to prevent the issue you linked

[anu-fatokun]

have you resolved this issue? I am experience this same issue even though I am not doing certificate-based authentication