Does ISE 2.6 support Windows 11 802.1x Wired

[manofsteel03]

We are having some issues with some of our new Windows 11 machines being able to successfully authenticate via wired connection to the network. Does ISE 2.6 support Windows 11? I had checked the EndPoint Profile configuration that is being used to evaluate our workstations and currently only see Windows 10 in the drop down list. Pretty much all our AD GPOs applied to our Windows 10 workstations (which our not having any issues) is also applied to our Windows 11 devices.

Thx in advance for any assistance given.

[ahollifield]

I see you are doing posture.  Do you have automatic posture updates enabled?  Have you done a manual update?  You may also need to update the client AnyConnect version along with the ISE Compliance Module.

[andrewswanson · Accepted solution]

ISE 2.7 patch 7 has a Cisco supplied endpoint profile for windows 11 workstation (only 1 condition of the 2 below has to match). Is your ISE Profiler Feed enabled?

hth

Andy

[thomas]

@manofsteel03 ,

Please read How to Ask The Community for Help so you will provide enough details for the community to help you troubleshoot and save a lot of time asking you questions about configurations and other details.

[hslai]

Regardless of ISE profiling and posturing services, ISE can generally authenticate a Windows endpoint unless you have conditions based profiling or posture results.

As andrewswanson pointed out, the ISE profiling feed service would update your ISE with the Windows 11 profiling policy. On the other hand, Windows 11 is very similar to Windows 10 so Windows 11 endpoints might get profiled as Windows 10 unless one of the Windows 11 specific attributes is available.

[manofsteel03]

Sorry getting response back to everyone as I was out for a bit. Thx everyone for your  valuable feedback. I'll start with the 2.7 upgrade to see how it goes.