Cisco ISE Windows Workstation Embedded-IoT Profile Library v1.0

[Craig Hyps]

Please Read First

Before importing to a production ISE deployment, be sure you have read and understand the following conditions and caveats:

• Before importing the profile library to a production ISE deployment, it is highly recommended that you first complete the following tasks:
  • Backup the ISE configuration database under Administration > System > Backup& Restore, or via CLI.
  • Optionally, export all current ISE profiles under Policy > Profiling > Profiling Policies > Export > Select All.
  • Restore current ISE configuration to a lab system and test the import of new profile library.  Note resulting profile policy changes to current endpoints which may impact policy assignment in the production deployment.
    
    
• This library contains approximately 9 new/updated profiles. 

• This library is based on Profiler Version 3 compatible updates which ensures that only ISE deployments running ISE 2.1 and above can import the library.  This is due to the use of probes introduced in ISE 2.1 including the NMAP and AD probes.

• Logical Profile creation:  ISE does not currently support import or API update of logical profiles.  Therefore, it is necessary to manually assign the new profiles to a new or existing logical profile.  Each of the profiles do have descriptions which can aid in deciding how to logically group the profiles.  Each profile can be a member of more than one logical profile. Logical profiles allow groups of devices to be distinguished in Context Visibility and facilitate the creation of policy rules based on logical groupings versus individual profiles.
  
  
• This profile library uses the existing Workstation > Microsoft-Workstation profile hierarchy.  There is a minor enhancement to the Windows8-Workstation profile.  As such, Feed Service updates will not make changes to this profile.  If wish to revert to original profile, this can be done by deleting the current version of profile and original Cisco-Provided profile will return in its place.

Installation

To install the Windows Embedded-IoT profile library:

1. Download the Cisco ISE Windows Embedded-IoT Profile library ZIP file
2. Unzip the ZIP file on your local computer to get the XML file.
3. In ISE, navigate to Work Centers > Profiler > Profiling Policies
4. Click Import ()
   1. Click Browse...
   2. Choose the Windows Embedded-IoT XML file
   3. Click on Submit.
5. Wait ~1 minute or less for the Windows Embedded-IoT endpoint profiles to be imported!

Once the endpoint profiles are imported, you may view the list of Windows Embedded-IoT devices by choosing Quick Filter and entering "Windows" under the Profiler Policy Name and "Administrator Created" or "Administrator Modified" under the System Type header.  The filters should display the following new or modified profiles:

• Windows-Vista-IoT
• Windows-Vista-Workstation
• Windows10-IoT
• Windows7-IoT
• Windows8-IoT
• Widnows8-Workstation (Modified)
• Windows81-IoT
• Windows81-Workstation
• WindowsXP-IoT