cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1604
Views
5
Helpful
5
Replies

Ise profiling

kp-tkr2014
Level 1
Level 1

Hi,

How to check any profiling policies applied in ISE.

If I say when this mac adders device 00-14-22-01-23-45  is accessing assign vlan x  ,Can we consider this as profile ?

Thanks 

 

 

 

1 Accepted Solution

Accepted Solutions

Marvin Rhoads
Hall of Fame
Hall of Fame

Profiling is making a decision about a device identity based on observed characteristics and behavior.

Assigning a MAC address to a VLAN is not profiling by itself it it's done by virtue of the MAC address being statically assigned to an endpoint group.

If we inspect the MAC address of unknown devices to see if the first 6 bytes indicate and HP Printer OUI and then dynamically decide it's an HP printer and put it in the printer VLAN automatically as a result then it's profiling. (as an example)

We can profile by turning the feature on at our PSN(s) and optionally customizing profiling policies.

Only if we use the profile outcome in an Authorization result is Plus licensing required.

View solution in original post

5 Replies 5

Marvin Rhoads
Hall of Fame
Hall of Fame

Profiling is making a decision about a device identity based on observed characteristics and behavior.

Assigning a MAC address to a VLAN is not profiling by itself it it's done by virtue of the MAC address being statically assigned to an endpoint group.

If we inspect the MAC address of unknown devices to see if the first 6 bytes indicate and HP Printer OUI and then dynamically decide it's an HP printer and put it in the printer VLAN automatically as a result then it's profiling. (as an example)

We can profile by turning the feature on at our PSN(s) and optionally customizing profiling policies.

Only if we use the profile outcome in an Authorization result is Plus licensing required.

Hi,

Can we consider the attached  as part of  profiling  which is under "standard authorization profile "  

Thanks

 

No, that's not profiling.

See the ISE Profiling Design Guide for info on what Profiling is and how it works.

Marvin is right about this.

NAD profiles are to support third-party. More info, see ISE Third-Party NAD Profiles and Configs