ISE Endpoint Profiling Query

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-19-2018 05:10 AM - edited 02-21-2020 10:58 AM
Hi All,
Is there a section in ISE whereby you can see log details on how a endpoint has been profiled. Having some issues whereby devices are being profiled correctly sometimes and not others. Keen to see if there is a section anyplace whereby you can see what rules have bee triggered to increase the certainty factor and thereby giving the device the profile.
The device I am having is with Samsung Galaxy phones being correctly identified certain times but other times just being profiled as "Workstation"
Thanks
Chris
- Labels:
-
Other NAC
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-21-2018 04:34 AM
A lot of profiler activity is logged in the endpoint debug logs. Access to the endpoint debug menu differs between ISE versions, which version do you use?
There is also the "Profiled Endpoints Summary" report, which has quite a lot of detail, but I think that report is not presented very well, you have to click around a lot to find useful info
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-21-2018 05:03 AM
Running ISE 2.2.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-21-2018 05:50 AM
Have a look at this guide, but basically you can enable Endpoint debug from here - Operations > Troubleshoot > Diagnostic Tools > General Tools > Endpoint Debug.
