Profiling Practices of IoT devices

[umahar]

Hello,

We have a number of IoT sensors in our environment which needs to be profiled.

For IoT devices which have DHCP enabled we have managed to leverage DHCP option request patterns and create custom profiling policies.

However some sensors have been assigned static IP addresses.

Just wanted to know what are the practices in terms of profiling IoT devices,sensors are being followed by the ISE community if DHCP probe is not available.

Also has anyone tried to use Netflow for profiling ?

[hslai · Accepted solution]

Nothing specific to IoT. Cisco Medical NAC could be a good read for you.

[shreyiot]

When DHCP probing isn't possible for IoT devices with static IPs, the ISE community employs alternative methods. These include analyzing network traffic using NetFlow, port scanning for open ports, MAC address lookups, behavior analysis, device databases, and manual profiling. Combining these techniques helps identify and profile IoT devices effectively.