ISE Client Provisioning

[jacovr]

I am running posture on my ISE box for Windows machines.

How do I stop ISE from trying to load an agent to my Mobile devices ?

I want to bypass posture on them

[bhose]

Hi Jacovr,

The easiest way is to specify the OS type in you client provisioning policy.

Another way would be to match on the authentication type. Our windows machines use MSCHAPv2 and our mobile devices use EAP-TLS.

Hope this helps

[Tarik Admani]

I try to deploy seperate ssids for mobile and corporate (posture) networks, this helps to not rely on profiling or other attributes (at one time there was a posture capable attribute), but i didnt have much luck making that work.