ISE BYOD enrollment error

[Wes Schochet]

OK, I have enrolled about 50 iPhones through the BYOD portal.  One of them gives me the attached error:  The system administrator has either not configured or not enabled a policy for your device.  Contact the help desk for assistance. 

I tired deleting the endpoint record and re-enrolling, but I get the same results.    Has anyone out there seen this and solved it?

Thanks,

Wes

[Tim Steele]

Wes,

Did you get this resolved?  I see it's been a month since you posted this question. 

I've seen this when ISE isn't properly profiling the device.  If you go to Administration -> Identity Management -> Identities -> Endpoints, filter by the MAC address in question, then look at the endpoint profile.  You can click on it to see the attributes ISE has collected to identify this endpoint.  I'd also look at Live Authentications during the time this happened to see if the Endpoint Profile changed during the flow.

Tim