ISE integraion with MDM

[henokk601]

i have ISE integrated with MDM server and a device that has already authenticated on the network, and stays connected, but fails out of compliance what will be the measure I have to take to ensure that a noncompliant device is checked periodically and re-assessed before allowing access to the network?

[Rob Ingram · Accepted solution]

Hi,

ISE should periodically poll the MDM server for compliance information, if there is a change to the compliance state a CoA should be issued by ISE - causing the user to re-authorise and potentially match a different Authorisation rule.

Reference here and here

HTH