Cisco ISE - My Devices Portal - Device Status

[help_pc]

Hello,

Is there a way in Cisco ISE - My Devices Portal, to have the Device Status auto change from "Not registered" to " Registered" (see image below) when a user adds their own device? Not using Native Supplicant and/or Certificate Provisioning. Just using MAB and Identity PSK. Already verified the authentication works. Trying to get the status to change otherwise I think this might confuse end users.

Running Cisco ISE 2.1

Thanks!

[Francesco Molino]

Hi,

The device registration is for BYOD process. When you enroll a BYOD device, the status will update itself automatically.
However, if I understood correctly, you're adding manually a MAC address and it won't change the status of the device to Registered.

[help_pc]

Thanks for the reply @Francesco Molino! Is the My Devices section part of BYOD? I am setting up something similar to this guide - https://community.cisco.com/t5/security-blogs/ise-byod-registration-only-without-native-supplicant-or/ba-p/3099290.

This is the process:

1. Student logs into My Devices Portal with AD creds (working)
2. Student selects Add. Enters device name and MAC address of their personal entertainment device (Xbox, PS4 etc) and then selects Submit. (working for the most part. Device is added but status does not change to registered)
3. Device gets added to Endpoint Identity Group (working)
4. Authorization Policy checks to see if device is in Endpoint Identity Group and is Wireless_MAB. If so ISE permits access. (working)

Is there any way on Step 2 to have the device change from Not Registered to Registered?

Thanks!

[Francesco Molino]

The link you're referring to isn't a full BYOD provisionning and used only few times. I'm quite sure you won't see the registered status if it's not a BYOD enrollment.

[Jason Kunst · Accepted solution]

No, you can hide that column however.
http://cs.co/ise-byod
Look under the customization options

[help_pc]

Good idea. Thanks!

[Jason Kunst]

Please mark is helpful

[help_pc]

Hi @Jason Kunst 

I tried your suggestions here - https://community.cisco.com/t5/identity-services-engine-ise/ise-mydevices-portal-customization-remove-the-column-for-pending/td-p/3466500 and it worked for the "Manage Device" page but can't seem to get it working on the "My Devices" page. The Pending status is still listed. I've tried inserting the Accepted solution script (from link above) in all three boxes but I can't quite get it to work. Any suggestions? Thanks in advance!