@MikeMoss ISE will learn ACIDex attributes from the AnyConnect client (if used) sent in the RADIUS packet, which will tell you what AnyConnect client version is used as well as device type, version, MAC address etc. In the Live Logs you will see attributes starting "mdm-tlv=" example:- mdm-tlv=ac-user-agent=AnyConnect Windows 4.9.05042
Under Context Visibility > Endpoints > <device> Attributes > Other Attributes it will list "ac-user-agent" for the AnyConnect client.