Integrate ISE with JAMF to check MAC Book Compliance Status

[pagosojayson]

Hi,

We have just integrated our JAMF with Cisco ISE and our next step is to form Authorization policies that would check MDM compliance only for MACBooks. We won't be able to use the profiling that will use OUI since our MACBooks will be sitting in docking stations which does not allow MAC Address pass through. Is there a documentation on how this can be done? I was thinking of using the device OS attribute but I am not sure which probes should I turn on in our ISE to get the OS details of a device and how much effect will it have have on our ISE' performance.

Regards,
Jayson

[Greg Gibbs]

You are going to have trouble using JAMF MDM checks against MacBooks on the wired network when there are dongles/docks involved as ISE currently performs the MDM check using the MAC address of the endpoint (in this case, the dongle/dock). There are various conversations on the Community related to this scenario, but see this post for more info.