We noticed recently that ISE suddenly stopped profiling Apple Devices, they would change after a few minutes to the correct profile, iPad, iPhone and OS-X. We implemented a policy to send Apple-Device to the provisioning page, this worked up until we installed patch 10 (2.4). Suddenly "all" (including all stately set) previously correctly profiled devices became Apple-Device, having to go to the provisioning portal. When portal has completed, ISE did not send the correct information to the WLC, so the clients, were sitting in non-compliant and not able to get on the wireless network. I don't know if this is patch 10 or a new profile sent down to ISE, or both. We segment mobile devices iPad etc from laptops on our wireless.
We did work with TAC and made fix, but not a solution. Users have to hit the provision portal then, turn off wireless wait 5 minutes and connect.
Any ideas, suggestions, thoughts, etc.
Thanks
