Cisco ISE profiling

Cisco ISE profiling works extremely well. For profiling to work, Cisco ISE must have the advanced license installed. 
You must also ensure that under Policy – Profiling, select Yes, create matching Identity Group for the devices you would like to profile in your organisation e.g. Microsoft workstations, Apple devices, WYSE devices etc

Advertisements

Cisco ISE

Cisco ISE is an identity based network access control and profiling device. There are a lot of fields to get your head around when you first install Cisco ISE. The main components of Cisco ISE is the network profiling, authentication and authorisation policies. Authentication is mainly done through 802.1x or MAB. 

 
Something I found useful is understanding that within the Authorisation Policy there are 3 main fields; Name of the policy, Conditions and Permissions. Conditions can be created and found under Policy Elements. Permissions go by the name of Results under Policy Elements.