Cisco ISE Authorization with Device OS

[Marc Aemmer]

Hi,

We want to permit access only to devices with Windows OS. I tried to make a authorization rule with the condition "Session:Device-OS EQUALS Windows" but it doesn't work. If I try to connect with a Windows 7 client, the access is denied and the log shows "15039 Rejected per authorization profile". What could be the problem?

We are using ISE with Version 1.1.3

thank you,

Marc

[Philip Vilhelmsson]

What probes are you using?

[vikasyad · Accepted solution]

There is no issue with the ISE version 1.1.3, you are is the latest. May  be the probes are not properly configured.

Please review the below link for assistance

http://www.cisco.com/en/US/solutions/collateral/ns340/ns414/ns742/ns744/docs/howto_30_ise_profiling.pdf

[Marc Aemmer]

This document is very helpful!

thank you very much.