Does profiling function available for SSL VPN of ASA with ISE/AD integration?

[ckli]

Hi experts，

If we sell ASA/FTD to the customer as the ssl vpn gateway with ISE/AD integration, the profiling function is working or not? Can we see what device the remote user use?

[ognyan.totev]

I think yes but i never tested it ? I think it will profiled by AD probe.

[hslai]

For Windows and macOS desktop OS clients with recent AnyConnect VPN module and ASA code, ASA sends MAC addresses to ISE to create/update endpoints for profiling. For mobile OS, such as Apple iOS, it depends on whether EMM configuration meeting what stated in AnyConnect Apple iOS - Transition to Apple's latest VPN framework (NetworkExtension).