ISE Profiling settings

[SMD28316]

I see these check boxes under the profiling settings, are they recommended to be enabled?

 

[Marcelo Morais · Accepted solution]

Hi @SMD28316 ,

 it's a best practice to enable the Endpoint Attribute Filter in Large Deployments to reduce global replication.

 Please take a look at: BRKSEC-3699, search for Endpoint Attribute Filter.

Note: to understand the use for Anomalous Behavior, please check the Anomalous Endpoint Detection and Enforcement.

Hope this helps !!!