ISE MAR (machine Access Restrictions)

[jinxer]

Whats your experience with it? Do you use it in large scale implementations where windows native supplicant is used, If so what values do you find works for your environment.

[Netwörkheäd]

Please don't use the Windows native supplicant. Get AnyConnect on those Windows boxes and they will get on the network beautifully.

That being said, having DHCP information to go with the MAC address allows for a fuller profile of the device, so that someone mimicking the MAC address would get busted if he connected to the wrong switch, didn't have the right DHCP banner or OS info, etc.

Sent from my SM-N900P using Tapatalk