cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

411
Views
0
Helpful
1
Replies

ISE-Profiling@Authentication

I have two questions about ISE Profiling features .

  • •1)      Does Authentication Process done after completing profiling ?

           

  • •2)      Can profiling feature overcome mac spoofing issue  (printer mac is used with static IP to access the network where user and printer are in same vlan  ,user with 802.1x and printers with MAB auth) and deny windows user with spoofed printer mac and IP add?
1 REPLY 1
jw.sl9
Beginner

Authentication is performed first. CoA can happen after profiling though..

Profiling can help mitigate MAc spoofing.  Proper VLAN assignment, dACLs will go a lot further in protecting from that specific issue.


I hope you find this information useful, if it was satisfactory for you, please mark the question as Answered. Please rate post you consider useful. -James
Content for Community-Ad