cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

240
Views
0
Helpful
1
Replies
manasjai
Cisco Employee

ATM Machine profiling

All,

 

I am looking for ISE profiling attributes for ATMs for a banking customer. These devices are non-Dot1x capable and have a static IP address assigned. 

 

Has anyone done something similar before?

 

Regards,

Manasi Jain

1 REPLY 1
Arne Bier
VIP Advisor

It's one thing to rely on ISE to profile an IOT device (like a light bulb) and work with a "certainty factor" percentage accuracy.  But I would be worried if my bank used profiling to assign its ATMs to the correct VLAN or assign ACLs etc. 

What is the reason for using Radius here?  if they don't do 802.1X to gain network access then could you not do MAB auth instead?  That would mean putting all the ATM's MAC addresses into an Identity Group.  But MAB auth for an ATM sounds dodgy too.  I don't see what they use case is here.

Create
Recognize Your Peers
Content for Community-Ad

ISE Webinars


Miss a previous ISE webinar?
Never miss one again!

CiscoISE on YouTube