Cisco ISE trying to posture a device that should not be able to be postured

Overview:
Cisco ISE version 1.1.4. Windows PC will be postured using Web NAC agent. Mobile devices (Apple/Android) can't be postured and will be exempted from posturing. Mobile devices will be exempted using the condition EndPoints:PostureApplicable EQUALS No. This worked fine and mobile devices will be caught by this condition while Windows device will be caught by another that sends to posturing.
Mobile device authorisation policy configured:
Problem:
A few days later, mobile devices doesn't seem to end up in the policy that has EndPoints:PostureApplicable EQUALS No. After having a look at monitoring, Cisco ISE is classifies mobile devices as Posturable. The Posture Status previously was "NotApplicable" now shows up as "Pending". See below.
Troubleshooting:
I tried a total of 4 different mobile devices. 2 Apple and 2 Android. All of them have the Posture Status of "Pending". Interestingly after a few tries, both the Androids starting working and have the PostureStatus of "NotApplicable", no configuration changes were made. The 2 Apple device still doesn't work and show up as "Pending".
I have restarted ISE, Access Point and Apple device. I have also tried other Apple device. All with the same problem.
Have any of you guys experienced this before?

Hi,
I have also experienced the same issues as yourself and would recommend opening a tac case. However I have used the device registration web portal to redirect all previous detected mobile devices to accept the aup and have them statically assigned to an endpoint group so they do not hit this scenario.
I know it is a workaround but its the only way i could get this to work and not affect devices that were one time detected as such.
Tarik Admani
*Please rate helpful posts*

Similar Messages

I have a Tritton TRI-BC200 hands free device that my iPhone 5 no longer "sees" on Bluetooth, so, I cannot pair the device. Anyone have a suggestion? Tritton no longer supports the device.

I have a Tritton TRI-BC200 hands free device that my iPhone 5 no longer "sees" on Bluetooth, so, I cannot pair the device. Anyone have a suggestion? Tritton no longer supports the device.

I had this problem and what I did was: read the user manual. I was actually using the wrong buttons to put the Tri-BC200 on pairing mode. I also boot my I phone. Everything worked OK. Regards.

Have been a Verizon customer since I got my first cell phone in my 30's - I am 50 now! A year ago, I stupidly opted to get a new phone on the EDGE program because I was trying my first Samsung device and was not sure I would like it having been an IPhone

have been a Verizon customer since I got my first cell phone in my 30's - I am 50 now! A year ago, I stupidly opted to get a new phone on the EDGE program because I was trying my first Samsung device and was not sure I would like it having been an IPhone user for years.I was right! Or so I thought.... The Note 3 has been horrible. I am on my second phone(replaced it under warranty) and it still freezes, shuts off on its own, and will not come back on for long periods of time. Having had enough, I decided to EDGE Up to another device. On March 16th I tried to edge up my device online but was unable to. I immediately called to figure out what the problem was. Back in October I had a mix up in my billing where I had set up a payment. It was not done properly by customer service and as a result my line was cut off. I called the EXACT day it went off, filed a complaint about the lack of follow through for my arranged payment, and thought I had it straightened out as the payment was made that same day. That incident, although it was a Verizon error, caused my Edge Contract to be "hotlined". I spent an hour on the phone on March 16th clearing the whole mess up. When the conversation ended, the Verizon representative admitted it was a Verizon error, documented everything, and then told me she was filing a release for the hotline hold that would take a couple of days. Her name was Linda and I stupidly trusted what she said.
The days passed as I prepared to have a major foot surgery and to get my classroom straight before I would be out recovering for 3 weeks. All the time, my Samsung continued to glitch out like it has since I got it! While sitting on the couch recovering, I decided to deal with the phone issue again and EDGE UP. I figured 10 days latter, Linda would have taken care of the issue. Unfortunately, I faced the same problem and was told it was not eligible to edge up at this time. BACK on the phone again, 2 supervisors, 3 customer service reps. ( JOE from New York being the rudest customer service rep. I have EVER worked with) and 4 frustrating HOURS latter, Jason, the equally rude supervisor from Rochester, New York, informed me that Linda gave me BAD information, there was NOTHING he could do, and I am NOT eligible until April 14th!!!!! The WORST experience I have EVER had with a company. They were completely inept, rude, and not concerned about my time, my frustration, or the problems I was facing with their product in the LEAST. I have 4 LINES on Verizon that I am going to talk to Sprint about buying out. It was a horrible experience, and I can NOT believe I have no recourse or anyone to talk to....

Edge has very clear restrictions, one being that you must have 6 months of clean payment history which you don't. Either wait until April 14, or good luck at Sprint.
I am unsure how it can be determined the payment mix up was the fault of CS, but regardless, the mix up was done. There can be any number of reasons why a payment could be missed without any fault on your part, however you are still the responsible party for the account and must live with the repercussions.

Everytime I purchase using iTunes on my home computer it asks me to verify my c/card, and states "Your Apple ID, ..., was just used to purchase ... from the iTunes Store on a computer or device that had not previously been associated with that Apple ID.

When i use my laptop to make an iTunes store purchase, it always asks me to verify my account details by entering my credit card verification number. After i do this i then receive an email stating "Your Apple ID, ..., was just used to purchase ... from the iTunes Store on a computer or device that had not previously been associated with that Apple ID."
My Laptop is my home device and apart from purchasing app's on my iphone 4, i only use my laptop to make itunes purchases.

I'm having a similar problem. I had previously (over a year ago) purchased 2 episodes of Law & Order. Then about 2 months ago, I purchased the 3rd season of Sons of Anarchy. When I downloaded these episodes to my iPad, about a dozen full seasons of various shows popped up, too. No money was removed from my iTunes account & theses particular shows aren't in my iTunes library on my desktop. I've tried every which way to delete them from my ipad, but can't. I went to the Apple store & they suggested I contact expresslane.apple.com for help. I submitted my problem, via email Friday, as they asked, but have not received any response. Any suggestions on how to get rid of these "phantoms?".

I am trying to log into my apple account and it is telling me my account is disabled. How can i get it enabled again? I have tried resetting my password and that did not work.

I have tried to log into my apple account so I can download my songs onto my iPhone. It keeps telling me my apple id is disabled. I've tried resetting my password but that did not work. How can I fix this?

After resetting your password you might then need to log out of your account on your device by phone on your id in Settings > Store (Settings > iTunes & App Stores if it's on iOS 6) and then log back in so as to 'refresh' the account on it
If that doesn't fix it then you might need to contact iTunes Support : http://www.apple.com/support/itunes/contact/ - click on Contact iTunes Store Support on the right-hand side of the page

Since upgrading to Windows 8.1, iTunes no longer recognizes my iPhone or iPad. I tried to reinstall iTunes. That did not address my problem. Any suggetions on what I should do?

Since upgrading to Windows 8.1, iTunes no longer recognizes my iPhone or iPad. I tried to reinstall iTunes. That did not address my problem. Any suggetions on what I should do?

Hey Bob0725!
Here is an article that will help you troubleshoot this issue:
iOS: Device not recognized in iTunes for Windows
http://support.apple.com/kb/ts1538
Take care, and thanks for visiting the Apple Support Communities.
Cheers,
Braden

Your Apple ID, was just used to download Excalibur: Knights of the King from the App Store on a computer or device that had not previously been associated with that Apple ID.

I keep receiving :
Your Apple ID, ********@*******.***, was just used to download xxxxxxxx from the App Store on a computer or device that had not previously been associated with that Apple ID.
You may also be receiving this email if you reset your password since your last purchase.
If you initiated this download, you can disregard this email. It was only sent to alert you in case you did not initiate the download yourself.
If you did not initiate this download, we recommend that you go to iforgot.apple.com to change your password, then see Apple ID: Tips for protecting the security of your account for further assistance.
Regards,
Apple
Apple has been no help, Mac Store has been no help.
Only iPad 2 & home computer authorized for downloading.
Anybody have an answer/same problem?
Thanks !
<Email Edited By Host>

I'm having a similar problem. I had previously (over a year ago) purchased 2 episodes of Law & Order. Then about 2 months ago, I purchased the 3rd season of Sons of Anarchy. When I downloaded these episodes to my iPad, about a dozen full seasons of various shows popped up, too. No money was removed from my iTunes account & theses particular shows aren't in my iTunes library on my desktop. I've tried every which way to delete them from my ipad, but can't. I went to the Apple store & they suggested I contact expresslane.apple.com for help. I submitted my problem, via email Friday, as they asked, but have not received any response. Any suggestions on how to get rid of these "phantoms?".

Bluetooth problem - Cannot Connect to Device that is not copyright protected SCMS-T Method

I have a Qosmio X875-5280 which has a bluetooth adapter. I also have a bluetooth device which is an adapter for a Bose Sounddock such that the device allows the Sounddock to receive the bluetooth audio stream from the laptop -- at least that is how it worked until recently. Diagnostics show that both the bluetooth adapter and the bluetooth device are working. When trying to connect to the device, I now get "connection failed" message or the message "You cannot connect to a device that is not copyright protected by SCMS-T method." It seems the Toshiba bluetooth stack is responsible for this, however, I fail to see why a device which is acting like headphones fails to connect now. I have Windows 7 64 installed. I have uninstalled all of the bluetooth drivers and re-installed them several times. Attached is a pdf file which shows all messages and settings relevant to the issue.
Attachments:
bluetooth messages.pdf ‏158 KB

See the solution I proposed some time ago here.
-Jerry

I have the current version of iTunes and when I plug my device in, the library says that I have songs on my device that are not showing up on my iPod touch. How do I get these songs on my device?

On iTunes, my library says that I have a lot of songs on my device that do not show up on my actual iPod touch. These songs disappeared from my iPod when I plugged it in, then they showed back up, but with a red square and circle, and now, after syncing and autofilling, they are gone again. How do I get these songs from my iTunes "ON MY DEVICE" library to my actual device?

SOLUTION: Some Music Won't Play After Upgrading Your iPhone To iOS7
Red square in red circle cannot play songs
My iPod isn't playing certain songs. Help?

Someone made a purchase from my Apple ID to a device that was not mine – I received an email stating that this happened, yet the only solution that Apple gave me was to change my password. I can see the $20.00 purchase that was not uploaded to any of my d

Someone made a purchase from my Apple ID to a device that was not mine – I received an email stating that this occurred, yet the only solution that Apple gave me was to change my password. When I look at my account, I can see the $20.00 purchase of music volumes that I did not purchase myself and was not uploaded to any of my devices; however, I cannot find a solution to getting my money back or to file a complaint against the unknown person that did this. Additionally, how do we prevent something like this from happening again, especially when I have an iPhone? What can I do in this situation?

Thank you for the suggestion. I did change the password; however, I generally will purchase gift cards to link to the account so that if something like this ever happened it would not be taken out of a credit card or bank account.

HT1222 I just installed this update and now I cannot access "Mail" at all. I tried reinstalling the program, but that does not work, either. Help!!!!!!

I just installed this update and now I cannot access "Mail" at all. I tried reinstalling the program, but that does not work, either. Help!

Paldeng, thanks for the suggestion. I've done all that. I can connect to the server, but apparently they are not recognizing my ID and password. I can use the server program if I don't go through Mail (using the same ID and password). My mother in another state with another provider has had the same email issue, as also my husband on his laptop who uses the same internet connection I do. His worked fine until we had it repaired at the Apple store and all the original programs reloaded (with the required updates, I assume). We can receive email in Mail, we just cannot send.
I contacted my service provider, and we went over my connections. They said it was not their problem and connected me with Apple, resulting in a charge to me because my warranty is long expired. Apple swears it is not their problem, it is the provider, so here I sit. My son was able to fix my Mom's Mail (she's 97) and got my husband's working also, until mine went out, by tweaking connection descriptions and ports remotely. The thing is, we had not messed with any of those settings, so what changed? I just did not want to bother my son again, as he has many other demands on his time.
Since this fiasco with the Mail v4.6 update, I'm wondering if something else was updated that works well with Lion and Mountain Lion, but does not work well with Snow Leopard and Leopard. I think the problem I had with the Mail update was that my Mail program had been renamed to Mail (original), and therefore was not being recognized by the update. Perhaps they had another tweak in there somewhere that is affecting outgoing mail connections?

Hacked Message: Your Apple ID was just used to download Podcasts from the App Store on a computer or device that had not previously been associated with that Apple ID

So I just got a message from Apple saying
"Your Apple ID was just used to download Podcasts from the App Store on a computer or device that had not previously been associated with that Apple ID"
I am new to Apple products and signed up to the app store about an hour before but have not downloaded any apps yet.
I also turned on iCloud Drive.
Neither of these are Podcasts and I do not have any Podcasts on my device.
The message is a really poor warning, it could for instance list the IP address which would immediately tell me if it was me.
It could list what type of device it was.
It could list what Podcast was downloaded.
But no, just some random message, probably generated by the really bad default iPhone settings that put ease of use before security.
I have a long complex password that I do not want ot have to change just because Apple generates a stupid message.
On Google you have a log of all logins and devices, is there something similar with Apple, so I can figure this out?

Kroll17 wrote:
I don't know, I thought it was pretty clear
"was just used to download Podcasts from the App Store"
it said it was used to download a Podcast from the App Store
I have not down downloaded any podcasts and there are no podcasts in the podcasts app, of course if Apple were to list the podcast that was downloaded, the IP address and the device it might help one dismiss the message.
I am running the latest v8.1.1 although how the version of my OS related to a message generated by Apple servers is beyond me, unless my device is not authenticating properly so Apple thinks I am someone else but then as I have not downloaded any Podcasts that would not seem to be the issue.
It does NOT say you downloaded a podcast. First, podcasts are not downloaded from the App Store; they are downloaded from the iTunes store.
It's very clear to me; the app named "Podcasts" was downloaded, not a podcast. "Podcasts" is a app provided by Apple for managing and downloading podcasts.

I am having trouble printing a PDF document. Whenever I click print nothing happens but when I am printing documents from Word, Excel etc they print without a problem. I've tried printing as image but that did not work. I uninstalled Adobe Reader XI and d

I am having trouble printing a PDF document. Whenever I click print nothing happens but when I am printing documents from Word, Excel etc they print without a problem. I've tried printing as image but that did not work. I uninstalled Adobe Reader XI and downloaded Adobe Reader X instead and that still doesn't work. I have Windows 7.

Hello,
Please follow the link to troubleshoot the printing issues with Adobe Reader:- Troubleshoot PDF printing | Acrobat, Reader.
Regards,
Nakul

Printing directly from a mobile device that is NOT on a wifi network

I would like to print directly from an ipad, that does not connect to a home wifi connection.
I have read in some forums, that the HP 6520 can create a direct ad-hoc style wifi connection that the IOS device can connect to, but this is not clearly stated in the feature set on this website.
Can a support admin please clarify whether printing directly from a mobile device that is NOT connected to a shared wifi network is possible?

Hi,
Pleae try the following setup:
http://h10025.www1.hp.com/ewfrf/wc/document?cc=us&lc=en&docname=c02994632
Regards.
BH
**Click the KUDOS thumb up on the left to say 'Thanks'**
Make it easier for other people to find solutions by marking a Reply 'Accept as Solution' if it solves your problem.

Do I understand correctly that if I own a Mac but no other Apple mobile devices, I will not be able to access my photos, documents, contacts, and calendar in iCloud?

Do I understand correctly that if I own a Mac but no other Apple mobile devices, I will not be able to access my photos, documents, contacts, and calendar in iCloud?

No, you don't understand correctly.
Apple iCloud Related Support/How-To/Troubleshooting Docs:
Apple IDs and iCloud
iCloud: iCloud security and privacy overview
MobileMe: About moving to iCloud
Frequently asked questions about the MobileMe transition and iCloud
iCloud: Troubleshooting the move from MobileMe to iCloud
iCloud: MobileMe services that no longer sync after moving to iCloud
iCloud: Supported system requirements
iCloud: What if my device or computer doesn't meet iCloud system requirements?
Creating an iCloud account: Frequently Asked Questions
iCloud: Managing your iCloud storage
iCloud: Purchasing iCloud Storage and Billing
iCloud: Resetting your Photo Stream
iCloud: Calendar & reminder data removed from iCal when disabling iCloud Calendar
MobileMe: Advanced iCal troubleshooting for MobileMe Calendar data
iCloud: What version of Windows software am I using for iCloud?

Cisco ISE trying to posture a device that should not be able to be postured

Similar Messages

Maybe you are looking for