ISE v3.3p3 profiles endpoint as "Unknown", based on MAC OUI Vendor

[HansK_NL]

ISE doesn't seem to make use of the latest and greatest table of MAC OUI Vendor strings (again)

I have around 100 endpoints profiled as "Unknown", with OUI Attribute "UNKNOWN" for which www.macvendors.com (in most cases) lists a vendor string.

e.g. E8:C8:29 or 2C:7B:A0, which manually resolve as "Intel Corporate"

Can Cisco please check their Profiler Feed Service? (Last applied update 2024-09-15)

Cheers, Hans

[ahollifield]

The correct path is to open a TAC case.

[thomas]

I did a quick RADIUS simulation test with MAB on ISE 3.3p2 with your MAC OUIs and it correctly identified them as Intel-Device (ignore the errors which are due to my simulator script messing the RADIUS accounting):

I checked my Profiling Feed Service page and it was updated on 2024-09-06 so you should have the necessary OUIs. As @ahollifield suggested, you should call TAC to find out why you don't have the updated OUIs working.

Edit:

A few hours later I was looking at my LiveLog and noticed that the same endpoint authentications were missing their Intel-Device Endpoint Profile classification - it just disappeared. So this could be a bug. Best to contact TAC if this is your situation and is repeatable.

[HansK_NL]

Hi Thomas,

Thank you for checking this issue. Just wondering, are the attributes listed for the devices now showing OUI Vendor "Unknown"?

Cheers,

Hans