ISE 1.3 - Failed profiling of iPhone 6 Plus
Hi,
Has anyone had a successful profiling of a iPhone 6 plus device?
My phone is profiled as "Workstation". Result of OUI is "unknown".
How can I tweak the profiling policies the right way?
Have you enabled the Profile Feed Service?
To activate the Feed Service, go to Administration > Feed Service > Profiler. Enable the checkbox for Enable Profiler Feed Service, fill out the rest of the options (optional) and click Save.
Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question. Otherwise, feel free to post follow-up questions.
Charles Moreton
Similar Messages
-
I was updated my Iphone 4s from computer(ITunes).ITunes get error and update failed.(When Iphone is preparing.).And now ı can't use my IPhone.At the screen there is a USB cable and up of the screen there is ITunes' logo.PLEASE HELP!
Read what i say. Put iPhone in DFU mode. Connect with USB cable and restore.
Read:
http://www.apple.com/support/iphone/assistant/restore/ -
HELP.
tried to update to ios 6.1 and it crashed my phone, plugged it into itunes like it told me to and it said i needed to restore it, so tried and it failed and it just keeps failing. its an iphone 4. what do i do?!it just says restore failed error 3194 but i can't find anything useful on google or anything i can understand, i don't get technology at all.
-
ISE cannot push the profile to the cisco network setup assistant?
We have tried a few android devices with version 4.2+ but still got the error message ‘Unable to download profile.(Have you logged into the guest portal?)’ as shown at the bottom picture.
In fact, we are connecting the devices to an open SSID which performs MAC filtering, then redirect to CWA and login with AD credentials,
then redirect to Google play store and can successfully download the network setup assistant.
Could you please advise the possible reasons that would cause this error message and make ISE cannot push the profile to the cisco network setup assistant?Here's a snipit from the Android spw.log. I see that there is an error trying to verify the hostname. Is it possible that this is caused by a non-trusted certificate? I'm using the self-signed cert built into ISE. I have an entry in the public DNS for guest.domain.com that resolves to the IP of my ISE server accessible from the guest subnet. I'm allowing all traffic from the guest VLAN to the ISE vlan on the firewall and all traffic to/from the ISE server in the provisioning ACL I have applied by ISE on the WLC during native supplicant provisioning. I know that guests can communicate with the ISE server since regular guest portal redirection works, just not the network setup assistant. I've renamed the domain to domain.com in this snipit.
2014.07.20 23:44:48 INFO:verion :4.4.4 SDK Level : 19
2014.07.20 23:44:48 INFO:State :START
2014.07.20 23:44:48 INFO:Starting Discovery
2014.07.20 23:44:48 INFO:Starting ISEDiscoveryAsynchTask
2014.07.20 23:44:48 INFO:DHCP Stringipaddr 192.168.30.110 gateway 192.168.30.1 netmask 255.255.255.0 dns1 208.67.222.222 dns2 208.67.220.220 DHCP server 192.168.30.1 lease 3600 seconds
2014.07.20 23:44:48 INFO:DHCP ipaddress192.168.30.110
2014.07.20 23:44:48 INFO:DHCP gateway192.168.30.1
2014.07.20 23:44:48 INFO:Discoverng ISE http return code :200
2014.07.20 23:44:48 INFO:ISEServer =guest.domain.com
2014.07.20 23:44:48 INFO:session =0516a8c000001932f37acc53
2014.07.20 23:44:48 INFO:Discovered using gateway :18786496
2014.07.20 23:44:48 INFO:Discovered ise server = guest.domain.com
2014.07.20 23:44:48 INFO:Discovered client mac = 5C-0A-5B-FC-37-0F
2014.07.20 23:44:48 INFO:Server:Key=guest.domain.com:0516a8c000001932f37acc53
2014.07.20 23:44:48 INFO:Downloading config fromguest.domain.com
2014.07.20 23:44:48 INFO:checkServerTrusted call
2014.07.20 23:44:48 INFO:checkServerTrusted call
2014.07.20 23:44:48 ERROR:DownloadprofileAsynchTask
2014.07.20 23:44:48 ERROR:java.io.IOException: Hostname 'guest.domain.com' was not verified
2014.07.20 23:44:48 ERROR:Hostname 'guest.domain.com' was not verified
2014.07.20 23:44:48 INFO:Internal system error.
On the ISE side, here is the snippet of logs during the same time as when the android network setup assistant was run.
2014-07-20 23:41:38,586 INFO [DefaultQuartzScheduler_Worker-6][] cisco.cpm.infrastructure.utils.NodeGroupFWUtil -:::::- Applied Firewall rules for node group.
2014-07-20 23:42:35,251 INFO [AbandonedTransactionReaper][] com.cisco.epm.db.AbandonedTransactionReaper -:::::- In AbandonedTransactionReaper : MaxActive : 20
0 CurrentActive : 0 MaxIdle : 200 MinIdle : 0 CurrentIdle : 2
2014-07-20 23:42:39,394 INFO [AbandonedTransactionReaper][] com.cisco.epm.db.AbandonedTransactionReaper -::::PDPInitialization:- In AbandonedTransactionReaper
: MaxActive : 200 CurrentActive : 0 MaxIdle : 200 MinIdle : 0 CurrentIdle : 0
2014-07-20 23:42:49,765 INFO [DataSourceListener Thread][] api.services.persistance.dao.DistributionDAO -:::::- In DAO getRepository method for HostConfig Type
: ACTIVE
2014-07-20 23:42:56,805 INFO [PDP-Heartbeats-0][] com.cisco.cpm.clustering.MnTClient -::::pdpha:- Removing session 0516a8c00000196f2a95cc53
2014-07-20 23:42:56,806 WARN [PDP-Heartbeats-0][] cpm.nsf.session.impl.SystemStateManager -::::pdpha:- Session 0516a8c00000196f2a95cc53 not found at complete
2014-07-20 23:43:35,441 INFO [portal-http-844314][] cisco.epm.license.flexlm.FlexlmFileHandler -:::::- Is License Valid for seId [1] = true
2014-07-20 23:43:35,441 INFO [portal-http-844314][] com.cisco.epm.license.LicensingManager -:::::- License is valid [true] for SeriveType [1]
2014-07-20 23:43:35,750 WARN [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -::0516a8c000001932f37acc53::guest:- --- GuestPortalUtils: Una
ble to determine language. Defaulting to English
2014-07-20 23:43:35,768 WARN [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -::0516a8c000001932f37acc53::guest:- --- GuestPortalUtils: Una
ble to determine language. Defaulting to English
2014-07-20 23:43:35,768 INFO [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -::0516a8c000001932f37acc53::guest:- initializing page definit
ion
2014-07-20 23:43:35,769 INFO [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -::0516a8c000001932f37acc53::guest:- Created guest theme page
def
2014-07-20 23:44:18,090 WARN [portal-http-844315][] cisco.cpm.guestportal.actions.SelfProvisioningAction -:test:0516a8c000001932f37acc53::guest:- ***BYOD Regi
stration Data***
macAddress: 5C:0A:5B:FC:37:0F
portalUser: test
authStoreName: Internal Users
authStoreGuid: 78954c30-e0f0-11e3-af67-005056bf4689
2014-07-20 23:44:18,113 INFO [portal-http-844315][] com.cisco.epm.jms.AQMessgeHandler -:test:0516a8c000001932f37acc53::guest:- Publishing message for event [T
xnCommit / commit] and message class[class com.cisco.epm.pap.api.transaction.Transaction]
2014-07-20 23:44:18,167 WARN [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -:test:0516a8c000001932f37acc53::guest:- --- GuestPortalUtils
: Unable to determine language. Defaulting to English
2014-07-20 23:44:18,168 INFO [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -:test:0516a8c000001932f37acc53::guest:- initializing page de
finition
2014-07-20 23:44:18,169 INFO [portal-http-844315][] cisco.cpm.guestportal.utils.CoAExecutorService -:test:0516a8c000001932f37acc53::guest:- Issue CoA reauth i
n 2000 milliseconds for sessionName 0516a8c000001932f37acc53
2014-07-20 23:44:18,171 WARN [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -:test:0516a8c000001932f37acc53::guest:- --- GuestPortalUtils
: Unable to determine language. Defaulting to English
2014-07-20 23:44:18,172 INFO [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -:test:0516a8c000001932f37acc53::guest:- initializing page de
finition
2014-07-20 23:44:18,173 INFO [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -:test:0516a8c000001932f37acc53::guest:- Created guest theme
page def
2014-07-20 23:44:20,171 INFO [pool-19-thread-4][] cisco.cpm.guestportal.utils.CoAReauthTask -:test:0516a8c000001932f37acc53::guest:- Running CoAReauthTask for
_sessionName 0516a8c000001932f37acc53
2014-07-20 23:44:20,194 INFO [pool-19-thread-4][] cisco.cpm.guestportal.utils.CoAReauthTask -:test:0516a8c000001932f37acc53::guest:- Issue Local CoA for sessi
on 0516a8c000001932f37acc53
2014-07-20 23:44:50,768 INFO [ContainerBackgroundProcessor[StandardEngine[Catalina]]][] cpm.admin.infra.action.SessionCounterListener -:::::- sessionDestroyed
- deducted one session from counter - Session ID - 0FFE9C73C9209D4EE2534558CB8F723B - Session Count - 0
2014-07-20 23:46:58,502 INFO [portal-http-844315][] cisco.epm.license.flexlm.FlexlmFileHandler -:::::- Is License Valid for seId [1] = true
2014-07-20 23:46:58,502 INFO [portal-http-844315][] com.cisco.epm.license.LicensingManager -:::::- License is valid [true] for SeriveType [1]
2014-07-20 23:46:58,693 WARN [portal-http-844315][] cisco.cpm.guestportal.utils.GuestPortalUtils -::0516a8c000001932f37acc53::guest:- --- GuestPortalUtils: Una
ble to determine language. Defaulting to English
2014-07-20 23:46:58,702 INFO [portal-http-844315][] cisco.cpm.provisioning.cache.FlowStateCacheManager -::0516a8c000001932f37acc53::guest:- Deleted old flow st
ate session with device id 5C-0A-5B-FC-37-0F -
Failed to update iPhone 4s to iOS 6
Failed to update iphone 4s to ios6 through wifi or itunes
After complete download, preparing for install and near the end, failed to update
Without explanatory error message or number
Only choices offered close the update or search for updateTry updating by using iTunes via a computer.
-
My iphone plus is bending, what does Apple offer regarding this issue?
I am trying to get to contact with Apple Customer Care, but not clear to me how to do it beside this channel of communication. I bought the phone from kosovar carrier which is under Slovenian ownership. This means that the original warranty comes from Slovenia, bit complicated but still I would like to get an urgent answer how to proceed with this issue, thanksMaybe i should have only asked if anyone is aware on apple's policy
regarding bending. I took the point that this seems not a proper forum to
pose Q's to apple thanks to both
On Wednesday, November 5, 2014, Apple Support Communities Updates < -
my ios is 4.1, iphone.
My Windows PC was down and I purchased new PC with new installed iTunes.
fail to upgrade to the latest ios via iTune now
fail to backup iphone at iTuneI figured it out.
I didn't have Apps in iTunes at all.
I needed to move apps from phone to iTunes which I finally figured out.
Once I did that I was able to sync the apps to new phone.
instructions on doing this via this chat need to be clearer.
I'm not an Apple super user and I didn't know I needed to move the apps. I thought hitting sync would work. That only works to move apps from iTunes to device. At least that's the way it seems. -
What can I do to sync Mac Book Air and iPhone 5 calendars if the iTunes message says that 'the sync server failed to sync iPhone'?
Thanks,
JulianRead the KB. Earlier today I had a fail to sync - I closed my Calendar app and the reopened and all was good.
Sometimes just closing the app the relaunching is all it takes. At other times a reboot of the Mac is all that is needed.
MJ -
Pairing devices fails after install of osx 10.8.5.. It fails at my Iphone and Ipad touch during the pairing about 5 seconds after I confirm the 6 digit number. Does this make sense? Whats the fix? I am moderately computer literate. Thanks for considering this.
The following entry may indicate a failing harddrive, so doing backups and replacing the harddrive may be in order.
Disk Information:
TOSHIBA MK7559GSXF disk0 : (750,16 GB)
S.M.A.R.T. Status: Failing <-----------
A little bit about drive S.M.A.R.T. status:
"The most basic information that SMART provides is the SMART status. It provides only two values: "threshold not exceeded" and "threshold exceeded". Often these are represented as "drive OK" or "drive fail" respectively. A "threshold exceeded" value is intended to indicate that there is a relatively high probability that the drive will not be able to honor its specification in the future: that is, the drive is "about to fail". The predicted failure may be catastrophic or may be something as subtle as the inability to write to certain sectors, or perhaps slower performance than the manufacturer's declared minimum."
http://en.wikipedia.org/wiki/S.M.A.R.T. -
I changed my pass code and couldn't remember the new pass code. After several failed attempts, my iPhone has been disabled. What do I do?
If you forgot (or don't know) your passcode, restore the device from backup on the last computer it was synced with when the passcode was turned on... this will remove the passcode. If you do not have access to the last computer it was synced with, you will have to force it into recovery mode & restore as a new device.
-
Iphone fails at verifying iphone restore
I am using windows 7, I have updated my iTune to 10.5 and backed up my iPhone 4 and started updating phone but it failed when verifying iphone restore and it gave error 6 tried every step but still not successfull can some help please as I cannot use my phone.
I'm having the same problem. I'm using the same usb outlet that I use all the time. I've used it with all other updates, accessories, etc. I did change the cord to make sure that it wasn't that, but I don't have any other outlets to try. I read on another post to try the outlets on the back of the machine, but my laptop only has the 2 on the side.
I posted a similar question myself... Hopefully someone will have a suggestion -
How Setting up global http proxy with profile in iphone(file.mobileconfig)
how Setting up global http proxy with profile in iphone(file.mobileconfig)
how Setting up global http proxy with profile in iphone(file.mobileconfig)
-
ISE: Dynamic Authorization Failed
Hi,
I am gettning warning messages in ISE saying
Cause:
Dynamic Authorization Failed for Device: 0002SWC003 (switch)
Details:
Dynamic Authorization Failed
It is not only on that switch but on all switches I have configured. I am using 3560 IPBase 12.2(55)SE6. I have configured them according to Trustsec 2.1.
My end devices are none-802.1x.
I can't figure out what is causing this error.
The thing is that I have not experienced any problem. In Live Authentications there are some 'Unknown' and 'Profiled' devices hitting the DenyAccess rule, but other then that everying is beeing Authorized fine.
Anyone got an idea what could be causing this error?
Regards,
PhilipThis is what I have found out.. Using ISE Version 1.1.1.268. If you go the logs page
Jan 10,13 7:39:12.147 AM
Dynamic Authorization failed
and then go to the details...
Failure Reason > Authentication Failure Code Lookup
Failure Reason :
11213 No response received from Network Access Device
Generated on:January 10, 2013 8:08:17 AM PST
Description
No response received from Network Access Device.
Resolution Steps
Check the connectivity between ISE and Network Access Device. Ensure that ISE is defined as Dynamic Authorization Client on Network Access Device and that CoA is supported on device.
...next check into Resolution Steps... -
Cisco ISE and Authentication Failed VLAN
I am trying to setup ISE to assign a VLAN to unauthorized computers. I tried using "authentication event fail action authorize vlan 666" command but unfortunately I'm using multi-auth because we have users with bridged VMs and Cisco does not support it (http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_55_se/configuration/guide/sw8021x.html#wp1454875).
Is there a way to make an Authorization/Authentication profile within ISE to assign the VLAN to failed devices?You can set endpoint protection status to quarantine, and establish policies that assign different
authorization profiles, depending on the status of the endpoint.
Quarantine essentially moves an endpoint from its default VLAN to a specified Quarantine VLAN. The
The Quarantine VLAN must be previously defined by a network administrator and supported on the
same NAS as the endpoint. Unquarantine reverses the quarantine action, returning the endpoint to its
original VLAN.
The quarantine and unquarantine actions are performed as a result of established Authorization Rules
that are defined to check for EPSStatus
http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_eps.html#wp1219979 -
Cannot install configuration profiles using iphone configuration utility, why?
I have several working configuration profiles, which I can distribute both via email and a website.
I'd like to install the profiles through the iPhone Configuration Utility, but I am not able to do so. The devices show up just fine in the list. When I choose the Configuration Profile tab and clicking the install-button on a profile (which will install fine via Email or website) in the list, nothing happens. Regardless of the device beeing out of the box, or activated via iTunes. What am I missing?
I have tried this on several iPad and iPad 2 devices with the latest (4.3.3) firmware installed.Hi,
I have the same problem. After creating profile with only General tab being set up it is failing to install on my iPad.
Profile installation failed
The profile could not be added to device
Any suggestions?
I even erase all content and setting but that didn't help either.
The only alarming thing is that in my Certificate section I have red message:
"This certificate was signed by and untrusted issuer"
Can that effect installation?
If that is the case how to fixed it?
P.S. iPad was purchased from Apple Store.
Regards,
Maybe you are looking for
-
-
Workflow for Document Approval
Hi all, I'm a newbie to SolMan and is trying to figure out how to implement a workflow for document approval. A similar question has probably been posted in the past, but I can't find a definite solution, only some hints. Basically, what we're trying
-
Status shows In Process in BPM
Hi, One of the proceses in BPM shows "In Process" for the past 7 days. It does not allow further messages to be processed. Regards, Venkatesh
-
Application Error (0xc0000005) when starting iTunes - Please help
I get the following Application Error message when I try to start iTunes: "The application failed to initialize properly (0xc0000005). Click on OK to terminate the application." I cannot think of anything that has changed on my PC, but something must
-
Got a brand new UK PlayBook yesterday. I ran through the setup, installed Blackberry Bridge on the Bold 9700, paired and everything worked. This morning, the PlayBook resolutely refuses to connect to the 9700 ("Unable to connect BlackBerry Bridge wit