Cisco ISE to block jailbroken or android specific versions

[rizwanafzal82]

We have Cisco ISE deployed with Advanced subscription license. Is it possible to block IOS jailbroken devices and android devices with older OS version (or rooted) from joining the wireless network.

[nspasov · Accepted solution]

You cannot do that with ISE alone. You will need to purchase a supported MDM solution (Airwatch, MobileIron, Maas360, etc) and integrate that with ISE. The MDM can then be queried by ISE and check for things like rooted device, PIN, encryption, etc

Thank you for rating helpful posts!

[orkhan.rustamli.96]

Hello, is the MDM still recommended with ISE 2.2+? And if yes, what is most recommended open source MDM solutions?

[Jason Kunst · Accepted solution]

For compatibility information please check your specific release. It shows what had been validated by the ISE team

https://www.cisco.com/c/en/us/support/security/identity-services-engine/products-device-support-tables-list.html

You can also check CSTA

https://www.cisco.com/c/m/en_us/products/security/technical-alliance-partners.html

I don’t know if any open source MDM