MDM ISE policy getting stuck

[rschwart]

We are implementing JAMF MDM on our campus. I have 2 policies one to check registration in the MDM and send unregistered devices to the MDM portal. The second policy allows the registered devices on to the network. Where I seem to be stuck is after the device is registered there is no check to allow the endpoint on the network. I've attached the 2 policies. Am I missing something, that would force this check to allow the endpoint on the network after registering? 

[Nidhi · Accepted solution]

Hi Roger,

The policy looks fine . 

After registration, CoA has to be triggered for the endpoint to re authenticate.

can you please enable prrt_srv log  to check the issue.

Thanks,

Nidhi

[hslai]

Adding to Nidhi's, I would suggest to enable DEBUG on MDM and check ise-psc.log for the requests and responses to the partner MDM sites.