A network administrator is configuring a corporate network enforcement policy. The policy includes rules for corporate-issued laptops, MDM-enabled tablets, and personal smart devices. However, the administrator notices that some clients are failing all rules due to a lack of profile dat
a. What should the administrator do to ensure these unprofiled clients can access the profiler collectors and receive a profile using best practices?
Best practice for profiling is to never grant full access by default. Instead, the enforcement policy should include a fallback rule for unprofiled devices. This rule assigns a 'Limited Access' or 'Quarantine' role that allows only DHCP and HTTP traffic. This allows the device to communicate just enough to trigger the profiler collectors (like DHCP fingerprinting), after which the device can be re-authenticated with the correct role.
Currently there are no comments in this discussion, be the first to comment!