When a device enrolls in workspace one (WSONE), WSONE decides to use the first MAC that it sees as the MAC address it will use for the ISE API. This MAC may be ANY MAC on the device, including wired, wireless, virtual, anyconnect, etc., and is NOT necessarily the MAC that is being used to connect to the wired or wireless network.
When a WSONE enrolled device connects to 802.1x, Cisco ISE sends an API request to WSONE for the MAC address that was connected to either wired, wireless, or vpn. If WSONE chose a different MAC for the API, it will tell ISE the device isn’t enrolled even though it is. Through debugs we found there is a hard coded API call from ISE that looks like this: https://<wsoneserver>:443/ciscoise/v1/ciscoise/service/devices/?paging=0&querycriteria=macaddress&value=<macaddress>&filter=all
VMWare is testing with the below API to check if we get the device list from workspaceOne console: /ciscoise/v1/ciscoise/service/devices/0/macaddress/{MACAddress}/all
They are asking to confirm with Cisco, if there are any other APIs that could be used with workspaceOne so that the complete list of MAC Address would be verified?
