Cisco ISE can not get endpoint profile Iphone connect through VPN

[Da ICS16]

Dear Community,

We have facing an issue with Cisco ISE can not get endpoint profile from iPhone device which connected through VPN (Anyconnect Client VPN). We have tried to create custom profiling condition and profiling policy, but seem no help. We would need your assistance to troubleshooting this issue.

New Profiling Condition:

-Attribute Name: device-platform

-Operator: CONTAINS

-Attribute Value: apple-ios

 But, we can get the endpoint profile from Android Phone.

Purpose: can review VPN mobile when user try connect via phone ( IOS and Android ). It would be grate if we can apply posture check to deep dive secure on it.

Well appreciated for your commend and supporting.

Best Regards,

[ccieexpert]

take a look at this:

https://community.cisco.com/t5/network-access-control/ise-not-profiling-iphone-via-vpn-using-acidex/td-p/4038830

i think the MAC is still not send.. so it may not be profiling.. but look at the authorization rule you can assign based on other attributes..