Authorization Profile to redirect a wired MAB user to My Devices Portal

[pacavell]

Is it possible to create an authorization profile on ISE 2.4 that redirects the wired MAB employee user to the My Devices Portal? The intent would be to force the employee on a BYOD device to register that device before receiving appropriate network access. This is specifically a wired use case where the customer does not want to use 802.1x.

[Jason Kunst · Accepted solution]

No. you wouldn’t redirect to my devices portal. That portal has no way to change access for the device after registration.

Here is the flow you would use
https://community.cisco.com/t5/security-blogs/ise-byod-registration-only-without-native-supplicant-or/ba-p/3099290

[pacavell]

Just to be sure, customer will be using only MAB for this wired access. 

[Jason Kunst]

Did you look at what was shared?

[pacavell]

Yes I did and it seemed to fit my use case. I just wanted to make sure I didn’t misinterpret something. Thanks for the guidance.