300-430 Question 190
Select 3A network administrator is deploying client profiling on a Cisco Wireless LAN Controller (WLC) integrated with Cisco ISE. The goal is to identify and classify devices connecting to the wireless network based on their operating system and device type. Which of the following steps are required to ensure accurate client profiling in this scenario?
- A
Enable RADIUS accounting on the WLC to send client information to ISE.
- B
Configure the WLC to use a static group policy for all connected clients.
- C
Ensure DHCP and HTTP profiling are enabled on ISE.
- D
Enable Device Sensor on the WLC to collect additional client details.
- E
Disable 802.1X authentication for the wireless SSID to allow profiling.
Show answer and explanation
Correct answers: A, C, D
Explanation
To enable accurate client profiling with Cisco WLC and ISE, the WLC must send RADIUS accounting data to ISE, and additional profiling methods such as DHCP and HTTP must be enabled on ISE. Device Sensor on the WLC further enhances profiling by collecting detailed client information. Using static group policies or disabling 802.1X authentication are not valid or secure solutions for this use case.
- A. Correct.
Enabling RADIUS accounting on the WLC is necessary to send client information, such as MAC addresses and session details, to Cisco ISE for profiling.
- B. Incorrect.
Using a static group policy for all clients does not help with profiling, as it does not provide detailed client-specific information to ISE.
- C. Correct.
Enabling DHCP and HTTP profiling on ISE allows it to gather additional details about client devices, such as operating system and device type, which are critical for accurate profiling.
- D. Correct.
Device Sensor is a feature on the WLC that collects information from protocols like DHCP, HTTP, and LLDP to enhance client profiling in ISE.
- E. Incorrect.
Disabling 802.1X authentication is not recommended or required for profiling and can compromise network security.