Cisco ISE offers a comprehensive set of pre-defined conditions, allowing you to utilize any of them. You can use these conditions either to apply the endpoint operating system condition directly or to establish an endpoint group tailored for specific OS types, which you can subsequently prevent from connecting.
Senior Technical Consultant at International Turnkey Systems - ITS
Real User
Top 5
2023-08-25T20:01:53Z
Aug 25, 2023
Yes, you can do it by creating a profiling condition on the OS you want to disallow and setting a policy in the authentication to reject this exact OS.
Learn what your peers think about Cisco ISE (Identity Services Engine). Get advice and tips from experienced pros sharing their opinions. Updated: April 2024.
Cisco ISE is an all-in-one solution that streamlines security policy management and reduces operating costs. Cisco ISE delivers visibility and access control over users and devices across wired, wireless, and VPN connections.
Identity Services Engine enables enterprises to deliver secure network access to users and devices. It shares contextual data, such as threats and vulnerabilities, with integrated solutions from Cisco technology partners. You can see what is happening in your...
Cisco ISE offers a comprehensive set of pre-defined conditions, allowing you to utilize any of them. You can use these conditions either to apply the endpoint operating system condition directly or to establish an endpoint group tailored for specific OS types, which you can subsequently prevent from connecting.
The VLAN on n any device including Cisco switches can be managed by Cisco ISE as long as SNMP is supported by the device.
In nut shell VLAN on a managed switch can be managed by Cisco ISE irrespective of that being Cisco or any other product.
Yes, you can do it by creating a profiling condition on the OS you want to disallow and setting a policy in the authentication to reject this exact OS.