Identify managed devices with dynamic MAC address using UDI

[vveen]

We are trying to get this working with 2.6 and Anyconnect 4.7 but lack the information to get this rolling.

What conditions needs I to check? Is this only MDM:DeviceRegisterStatus Equals Registered and is this then automatically using the UDI instead of the MAC?

Is there any documentation how to set this up?

Thank you.

[Timothy Abbott]

This is a specific use case that involves using the "External Data Source" condition in posture and references posture status of the endpoint from AD. You will have to a have a means (such as a script) to insert the posture status of the endpoint into AD because that is where ISE will retrieve it. It does not use the dictionary attribute you referenced.

Regards,
-Tim