cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
779
Views
1
Helpful
2
Replies

MDM ISE policy getting stuck

rschwart
Level 1
Level 1

We are implementing JAMF MDM on our campus. I have 2 policies one to check registration in the MDM and send unregistered devices to the MDM portal. The second policy allows the registered devices on to the network. Where I seem to be stuck is after the device is registered there is no check to allow the endpoint on the network. I've attached the 2 policies. Am I missing something, that would force this check to allow the endpoint on the network after registering? 

1 Accepted Solution

Accepted Solutions

Nidhi
Cisco Employee
Cisco Employee

Hi Roger,

The policy looks fine . 

After registration, CoA has to be triggered for the endpoint to re authenticate.

can you please enable prrt_srv log  to check the issue.

Thanks,

Nidhi

View solution in original post

2 Replies 2

Nidhi
Cisco Employee
Cisco Employee

Hi Roger,

The policy looks fine . 

After registration, CoA has to be triggered for the endpoint to re authenticate.

can you please enable prrt_srv log  to check the issue.

Thanks,

Nidhi

hslai
Cisco Employee
Cisco Employee

Adding to Nidhi's, I would suggest to enable DEBUG on MDM and check ise-psc.log for the requests and responses to the partner MDM sites.