cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
646
Views
0
Helpful
3
Replies

Scanning client device for profiling details

scsc_tech
Level 1
Level 1

I am hoping to build up my profiling policies to use some more criteria than just MAC address, for obvious security reasons.

'

Can anyone recommend a piece of software that can scan a client device and get profiling details like DHCP, LLDP, CDP, user-agent, etc? Or is there a place in ISE that I can get these details?

 

Thanks

 

1 Accepted Solution

Accepted Solutions

Timothy Abbott
Cisco Employee
Cisco Employee
Have you tried using the ISE EAT tool? Its a free tool that allows you to pull all profiling data from ISE and will help you build better profile policies.

Regards,
-Tim

View solution in original post

3 Replies 3

Timothy Abbott
Cisco Employee
Cisco Employee
Have you tried using the ISE EAT tool? Its a free tool that allows you to pull all profiling data from ISE and will help you build better profile policies.

Regards,
-Tim

I gave the ISE EAT tool a try and unfortunately the results are very lackluster.

In most cases the clients only had the MAC address column populated. That doesnt give me much more to profile on than I already had at my disposal.

 

When running show cdp neighbors detail or show lldp neighbors detail, I get far more information to profile on. Its just time consuming doing this manually

 

scsc_tech
Level 1
Level 1
I have not, Ill look into that right now!