Securing network with ISE profiling HP devices

[RSundstrom]

Hello,

How can I create a profile for Hewlett Packard printers and allow them onto the network without also allowing any other HP device free access. I only want to allow HP printers. I do not want to allow HP laptops, notepads, desktops, etc.

I would prefer not to allow them onto the network using MAB.

thanks,

Bob

[Marvin Rhoads · Accepted solution]

This is a common use case. The ISE Profiling Design Guide (see page 76 onwards) lays out at least one way of doing this - using an nmap Probe Endpoint Scan.