Profiling Cisco's ASA's without SNMP

[MS-JK]

Hi,

As customer will NOT approve snmpv2 (only v3), which we hoped to profile Cisco ASAs connecting to switching environment - any one else have cleaver way of identifying customer owned ASAs (hate to just use MAC and some external scans that can be easily spoofed)?

Any future support of SNMP v3 on ISE to profile end-points? Its silly why this isn't supported yet.

Thanks for advise.

Jan

[Jason Kunst · Accepted solution]

have you considered locking down the ports using dot1x/mab?