Posture Status for Smartphones - Android - Pending

I am trying to pass smartphones through our ISE infrastructure. I have Windows working properly, it assigns a certificate, joins to the employee network, installs the NAC client, and requires remediation action.
When an Android phone (haven't tried iOS yet) tries to connect it receives a certificate, is profiled as Android, and then gets stuck in posture status pending.
I have attached a screenshot.
Thanks.

I was thinking - would reducing it to Registered Device (only registered devices would authenticate with 802.1x anyway) and SessionOS equals Android be vague enough to catch it and not allow it to pass?
Endpoint Id
C8:AA:21:02:16:75
Endpoint Profile
Android
IP Address
Identity Store
Identity Group
RegisteredDevices
Audit Session Id
ac1e10450000120e52056988
Authentication Method
dot1x
Authentication Protocol
EAP-TLS
This is how one android device is being profiled - I would guess that would allow it if I opened the rule up more?

Similar Messages

Posture Assessment with ISE for smartphones

Hi support community..
I would like to know if is posible to implement NAC for smartphones (android phones, iphone, ipads basically) using the ISE. the primary goal would be check that the smartphone has a Antivirus installed.
Many Thanks in advance.

I second Richard on the fact that it can't be done. However, I was going through this and wanted to share in case it helps.
Default Posture Status
http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_pos_pol.html#wp1919363
Jatin Katyal
- Do rate helpful posts -

ISE Posture Status Pending

Hello,
I am newly configuring and testing Posturing/Client Provissioning on ISE. I configured Client_Provissioning Policy without any Posture_Policy just to test it works or not.
My Wireless client can authenticate and get and install NAC_Agent successfully, but after that no network access is given to the client pc.
on the ISE Authentication Reports it shows ( Posture Status Pending )
and on the Wireless client everytime when i open browser i get this message " Cisco Agent was detected and is running. If you are still unable to access the network please contact you administrator"
I dont know what is the issue, plz help

Hi Ravi,
I have not yet configured any Posture policies. i have configured only client-provissioning policy, i want to first test client-provissioning works properly before applying any Posture-Policy.
So My wireless clients are correctly redirected and recieve NAC Agent, but afterthat it seems that the NAC_Agent does not do anything and does not send any report back to ise for further processings.
on the ise Authentication Report i can see, the client is stuck in UKNOWN-STATUS , and shows Posture_Status Pending...
it does not go to Uncompliant or Compliant Status.
I dont know what can be the issue? neither ISE shows me the error , nor the WLC.

ISE 1.2 - Posture Detail Assessment - enforcement audit mode report not show status for non-compliant

ISE 1.2 - Posture Detail Assessment - enforcement audit mode report not show status for non-compliant.
- For old version 1.1.4 it can be reported for non-compliant, How can I generate report for this?
Thanks
Kosin Usuwanthim

It used to be in there (id 226635 is the last one with it); should I clean it up a bit and put it back with a bit more of a disclaimer?

Submission in Pending Status for Several Days

I made my 1st submission of a touch screen.
However, the status has been in Pending (step 7/7, in review) status for 4 working days. Is it normal?

I made my 1st submission of a touch screen.
However, the status has been in Pending (step 7/7, in review) status for 4 working days. Is it normal?
Hi
Please mail to [email protected] for issue ask if you think the status long no update.
Thanks, Steve

DBI: How can I reverse purge pending status for a Plan snapshot?

Hi,
I erroneously set a plan snapshot to purge. It's status is now "purge pending". I know that the purge will be effective with the next running of incremental concurrent for Plan Management dashboard (DBI).
Anybody knows how can I reverse the snapshot status to Active and prevent the purge of it?
Thanks, AC
Edited by: user591378 on 13-nov-2008 7:03

Hi,
I erroneously set a plan snapshot to purge. It's status is now "purge pending". I know that the purge will be effective with the next running of incremental concurrent for Plan Management dashboard (DBI).
Anybody knows how can I reverse the snapshot status to Active and prevent the purge of it?
Thanks, AC
Edited by: user591378 on 13-nov-2008 7:03

User status for Notification and Work order

We generate Service Notification IW26. I have already configured user status like PMND (Planning order not done), AWOP (Awaiting ordered parts) etc. in the Work order a while ago. Now the user wants same User status to the Notification as well. I like to know from experts what is the value added to have the same user status for both Notification and Work Order?
Do you have any suggestions?

Hey Chandra,
The customer intent behind this requirement must be to check in reporting / List Display Transaction about the Order Status. If they want to know looking at a Pending Notification List about the Order Status, you can always provide similar report using SAP Query Builder or with help of your Developer.
Apart from that If the Requirement is to have these User Statuses in Notification itself, Please advice them that it will be extra activity while performing transaction.
I dont see any other benefit of having User Statuses added to Notification as well.
Do let me know if you have some more info on Why Customer is requesting this....
Regards,
Avi

Ise posture status notapplicable

Hello ,
after upgrading ISE 1.2 to 1.2.1 , I can't see posture status (pending) although it is working properly. I tried to install patch 1 but the same result.
before upgrading , posture status was Pending when posture status still not reach to ISE.

I have same problem too.
When workstation install NacAgent 4.9.4.3 successfully, then the posture will be stucked.
I didn't see about NAC Agent on report: "Posture Detailed Assessment" and "Client Provisioning"
Any help or advice please ? Should I configure the redirect ACL, dACL, switch ACL, or something like that ?

Siebel Marketing 7.8, Status: status loading campaign as Pending

If workflows has to be enabled what are workflow to be enable.
Can i know the why imn't able to load campaign even i followed the correct procedure as follows
1)create offer and treatment
2) create list
3)create campaign and adding the offer and treatment to it.
4) adding the list
4) allocating list
5)loading campaign-> here im getting status loading campaign as Pending
Can i know where im doing mistake .

Check link below for a list of required workflows for marketing:
http://docs.oracle.com/cd/B31104_02/books/MKTG_InstallAdmin/mktg_installadmin_installmktg4.html#wp186830

Need a Badi to look the good issue status for prod order before good receipt in MIGO

Hi ,
Need a Badi to look the good issue status for compoents for prod order before good receipt in MIGO.
Example : There are 10 comps need to be issued to production order to make any assy but 6 comps were issued
and remaining 4 comps are not yet issued.,in this situation if I try to do goods receipt for prod order through MIGO.,system should populate the warning
message saying still goods issue are pending for prod order.
Please advise .
Thanks
Prasad

Hi Prasad,
Before trying with a BAdI, have you tried to control this behaviour thru the Order confirmation parameters (OPK4)?
Note that you can have a termination in case of having problems in the goods movements..
Take a look of this and the SAP help:
Termination of Confirmation if Incorrect Goods Movements
Controls if the confirmation is terminated in the event of incorrect goods
movements.
Use
This enables you to terminate the confirmation in the event of incorrect
items, for example, to prevent postprocessing records.
Dependencies
The indicator is only evaluated if either no process control key or one
process control key has been stored that enbles the goods movements to be posted
in dialog AND for which the "provide error handling for goods movements"
indicator is active. If there are incorrect goods movements, the system behaves
as follows:
A log is issued that gives information on the incorrect goods movements
If these incorrect goods movements are determined by inventory management,
then the option of correcting these errors is offered in the error handling
If the correction is not successful, the confirmation is terminated
Kind Regards,
Mariano

Ne reconnait plus mon smartphone android

depuis la mise a jour vers mavericks impossible de connecter mon smartphone android en mode usb!

Try:
iOS: Device not recognized in iTunes for Windows
or
iPhone, iPad, iPod touch: Device not recognized in iTunes for Mac OS X

Realtime Privacy Monitoring on Smartphones Android sends out info without permission

Realtime Privacy Monitoring on Smartphones Android sends out info without permission
http://appanalysis.org/
I think it si time for verizon to put a stop to ths NOW

w40d....you are right about that. this is why i wish these types of "studies" wouldn't print things like "30 popular or heavily used apps." i'd like them to actually LIST the 30 apps that they studied. then show tell us, which 15, of the 30, were sharing info. it's possible that none of the preinstalled apps are on that list. if any of them were the preinstalled apps from vzn, then i'd have a much bigger problem with it. THEN i would get up on my soapbox. but we don't know that skype, or any of the other preinstalled apps are sharing info. we only know that about half of the ones they studies do it. if the only ones that are doing this are ones that we have to download, then it's up to us to dis that app. i often see comments when looking into an app to the affect of "why does it need this info....uninstalled" etc, etc. the app will tell you what it needs. if a simple game wants your location then you have to wonder why. it doesn't need your location to function as designed, so i would assume it's sharing it with someone.

Can we set "IN PROCESSu201D status for multiple users for a single workitem?

Hi,
As per my client current scenario every work item will be sent to 3 useru2019s (One is the supervisor of the other two users). If any one of the user executes the work item it will automatically call a Ztransaction and displays the screen. When the user without taking any action, he presses the BACK button (in Ztransaction) and comes out of the transaction. Then the workitems for the rest of the users will disappear from there inboxes.
But my client requirement is such that, whenever the user click on back button the workitem should be "IN PROCESS" status for two users(One is the supervisor and one who executes the workitem) out of 3 users possessing the workitems.
Please provide me any advice to the above requirement.
Thanks in advance,
Ranganadh

I think this can be done either by putting a check whether the user does anything. If he does a flag should be set which can be used in the Codition Tab of the Activity step that will prevent the workitem from completion.
Thanks
Arghadip

My Contracted SIM is for an android phone, but when i put the sim in an iphone my 3g no longer works?..

My Contracted SIM is for an android phone, but when i put the sim in an iphone my 3g no longer works?.. Is it because my 3g is only active on the android os and not the ios platform? Texts, Calls and Wifi work fine but the 3g doesn't work. My phone only shows 'GPRS' in the top left corner. Also I get a message come up saying "Could not activate mobile data network. You are not subscribed to a mobile data service".
Any advice would be great.

Hi hexonxonx, I'm on o2. Thanks for your advice. You are right. All I had to do was change one of my APN settings to mobile.o2.co.uk and reboot my phone and this sorted it out straight away! Thanks again. Much appreciated . I was thinking I was going to have to go back to an android phone to use my 3g again but this eliminated that need. Thanks.

I had to trade in my iPhone for an android, I did not unencrypted the back up on iTunes, i no longer have access to the phone, is there a way to get to my data?

I had to trade in my iPhone for an android, I did not unencrypted the back up on iTunes, i no longer have access to the phone, is there a way to get to my data?

The difficulty is you have to unencrypt during the restore process, which you cannot do with an Android device.
See: http://support.apple.com/kb/HT4946

Posture Status for Smartphones - Android - Pending

Similar Messages

Maybe you are looking for