Hi Team,
In Windows browser (https://blogs.windows.com/msedgedev/2017/03/23/strengthening-microsoft-edge-sandbox/) there is a sandbox. It creates a different TCP stack on Windows machine, and this is causing problems with ISE - ISE it treating this “sandbox” as separate machine and is trying to authenticate it. Do we have any solution for such scenario?
I got this answer from Hsing-Tsu, but maybe we have a strategy for this challenge :
"It seems this MS Edge sandbox app container has its own MAC address so ISE considers it as a separate endpoint. As it not capable of DOT1X, MAB is the only thing I can think of. If it associated with some particular OUI or MAC address pattern, we may profile and put such into some particular endpoint profile and/or endpoint group and authorize them accordingly. "
Thank you!
Best regards, Gyorgy
