About Oliver Laue

Oliver Laue · 10-01-2021

Hi, most of you know a certain behavior. A Windows machine which was authenticated via dot1x sets it's NIC to WOL on shutdown and a MAB session is initiated. But with newer devices Mac addresses are in most cases from the Dock or an USB dongle. This ...

Oliver Laue · 04-15-2021

Hi, if NMAP is used for Profiling devices is there some kind of interval which reruns the scan to check if the device is still the same.I know there is some kind of overload protection for the Node but is there some kind of verification like (if nmap...

Oliver Laue · 02-05-2018

Hi folks,did someone has a good advise to troubleshoot the MDM Connector?We are currently seeing issues on a ISE 2.1p6 connected to a MobileIron 9.6.0.2 where the status of the external MDM server sets itself to Disabled after 30 to 60 Minutes withou...

Oliver Laue · 07-18-2017

Hi,i recently updated a customer environment to ISE 2.2p1 and we noticed some strange things in the Sponsor Flows. Did someone has any Information on the following things?If you disable the global E-Mail feature for Guest "Work Centers - Guest Access...

add Fastlane Support in NSP Profile · 08-17-2016

Hi,with AireOS 8.3 and iOS 10 we receive a feature called Fastlane for QoS between Apple idevices and a Cisco Wireless Infrastructure.Will there be an addition in a future patch for the NSP Provisioning to control this feature in a BYOD environment?

Oliver Laue · 05-05-2022

Hi, I noticed a similar behaviour for other API Calls.If you query suggested release with or without images the lookup seems to traverse the category.But for Devices like a C9800-CL-K9 the response contains the AireOS vWLC image because they are in t...

Oliver Laue · 10-04-2021

Rewrite your Rule to use EndPointPolicy instead of IdentityGroup.According to the ISE Detail log the Device has the IdentityGroup: Profiled

Oliver Laue · 10-04-2021

Sorry, I meant your Authorization Policy. if you do a combined rule which should match multiple Profiles you have to check to do an "or" instead of on "and".

Oliver Laue · 10-04-2021

Maybe you have a logic error in your Policy, because the Log shows 2 Logical Profiles the Device is assigned to. What does your Policy look like for this device?

Oliver Laue · 10-01-2021

I think I answered my own question. MAR (Machine Access Restriction) should achieve this.In your Active Directory Identity Source under Advanced the "Enable Machine Access Restriction" must be checked and an aging timer should be set (12h set for tes...

Member Since	‎06-14-2012 02:05 PM
Date Last Visited	‎10-19-2023 07:32 AM
Posts	80
Total Helpful Votes Received	60

User Statistics

User Activity

MAB permit after valid 1x Session

NMAP rescan interval

MDM Connector Troubleshooting

ISE 2.2 changes in Sponsor Flows

add Fastlane Support in NSP Profile

Re: Inconsistent behavior in the responses from the SW Suggestion API

Re: Profiling for a certain OUI not working

Re: Profiling for a certain OUI not working

Re: Profiling for a certain OUI not working

Re: MAB permit after valid 1x Session