ISE-Profiling@Authentication

[muhammadahmadzeeshan2006]

I have two questions about ISE Profiling features .

• •1)      Does Authentication Process done after completing profiling ?

• •2)      Can profiling feature overcome mac spoofing issue  (printer mac is used with static IP to access the network where user and printer are in same vlan  ,user with 802.1x and printers with MAB auth) and deny windows user with spoofed printer mac and IP add?

[jw.sl9]

Authentication is performed first. CoA can happen after profiling though..

Profiling can help mitigate MAc spoofing.  Proper VLAN assignment, dACLs will go a lot further in protecting from that specific issue.