Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ISE profiling on Apple-Device, Apple-iPhone and Apple-iPad

hi,

I have a question on ISE profiling, espcially on Apple-device.

My testing environment: when i use iphone to connect, by default the result profiled me as apple-device.

But when i try to get it more specific, i mark the identity store as apple-iphone on the authorization rule, it fail somehow. It seem it cannot go deeper to analyze it's iphone, instead of Apple-Device.

The default of the apple-iphone porfiler condition for apple-iphone is checking the hostname and user-agent. So when i try to use the safari browser to get online, it won't bounce me as apple-iphone profile somehow..

Question:

01. what should i do in order the profiler can analyze directly it was the apple-iPhone, or any thing need to configure ? say like authorization rule?

Thanks

Noel

3 REPLIES

ISE profiling on Apple-Device, Apple-iPhone and Apple-iPad

Are you getting redirected to the web portal in ISE? That is the most common way the ISE can get the user agent of the browser in order to profile the device as the apple-iphone. Give that a try and then see if the user agent is learned, you should get a message to refresh your browser momentarily. Then coa should trigger and the wireless controller should get the new authorization profile that you configured for your apple-iphone endpoints.

Thanks

tarik Admani

Tarik Admani *Please rate helpful posts*
New Member

ISE profiling on Apple-Device, Apple-iPhone and Apple-iPad

Noel, here are some tips/facts.

WLC 4400 series dont support CoA

CoA is disabled by default.

ISE take about 60-120s to identify a device ( in case of multiple PDPs)

Use web-auth for these devices (http based) instead of using RSPAN.

Thanks

New Member

Hello Yong,

Hello Yong,

I am trying to do the samething and I am having the same issue. Can you please tell me where in ISE you select the device to be an 'Apple-Device'?

1223
Views
0
Helpful
3
Replies