An engineer is implementing profiling for BYOD devices using Cisco ISE.
When using a distributed model, which persona must the engineer configure with the profiling service?
Click on the arrows to vote for the correct answer
A. B. C. D.D.
When implementing profiling for BYOD (Bring Your Own Device) devices using Cisco ISE (Identity Services Engine) in a distributed model, the engineer must configure the Policy Services Node persona with the profiling service.
In a distributed deployment of Cisco ISE, different personas are responsible for different services. The Policy Services Node (PSN) persona is responsible for implementing policies and enforcement of those policies, including authentication and authorization, posture assessment, and profiling of endpoints. The PSN interacts with other nodes in the distributed deployment, such as the Administration and Monitoring nodes, to provide comprehensive services.
Profiling is the process of gathering information about an endpoint, such as its operating system, installed applications, and network behavior, to determine its identity and assess its security posture. Cisco ISE can perform endpoint profiling by analyzing network traffic and using built-in or custom-defined probes to gather endpoint attributes.
To enable profiling for BYOD devices in a distributed model, the engineer should configure the Policy Services Node persona with the profiling service. This involves enabling profiling on the PSN, defining the profiling policy, and selecting the appropriate probes to use for endpoint profiling. The PSN will then use this information to identify and profile BYOD devices as they connect to the network.
In summary, when implementing profiling for BYOD devices using Cisco ISE in a distributed model, the engineer should configure the Policy Services Node persona with the profiling service. The PSN is responsible for implementing policies and enforcement, including profiling of endpoints, and interacts with other nodes in the deployment to provide comprehensive services.