300-715 practice question 23 of 35

An engineer is designing a BYOD environment utilizing Cisco ISE for devices that do not support native supplicants Which portal must the security engineer configure to accomplish this task?

Full set: 294 questions
Answer options
A: MDM
B: Client provisioning
C: My devices Correct answer
D: BYOD
Correct Answer:
C. My devices
Explanation

The My Devices portal is specifically designed for end-users to manage their personal devices for network access. For devices that do not support a native 802.1X supplicant (such as smart TVs, gaming consoles, or some IoT devices), users can log in to the My Devices portal from another trusted device (like a corporate laptop) and pre-register the MAC address of their supplicant-less device. Cisco ISE then uses this registered MAC address for MAC Authentication Bypass (MAB) to grant the device appropriate network access. This process is a core component of the BYOD onboarding flow for such devices.

Why Incorrect

A. MDM: MDM (Mobile Device Management) is an external system that ISE integrates with for device compliance and management, not the primary ISE portal for registering supplicant-less devices.
B. Client provisioning: This portal is used to provide endpoints with necessary software, such as the AnyConnect NAM supplicant. This is contrary to the requirement for devices that cannot support a supplicant.
D. BYOD: "BYOD" refers to the overall onboarding process or flow. The My Devices portal is the specific, configurable component within that flow that enables users to register their devices.

References

1. Cisco Identity Services Engine Administrator Guide

Release 3.1

"My Devices Portals" section: "The My Devices portals allow employees and other internal users to add and manage their personal devices for network access... Users can access the My Devices portal from their desktops to pre-register their devices before they bring them to the office. For example

a user can register the MAC address of a personal tablet from their work laptop."

2. Cisco Identity Services Engine Administrator Guide

Release 2.7

Chapter: "Cisco ISE Portals"

"My Devices Portal" section: "The My Devices portal allows employees and contractors (internal users) to add and manage their personal devices for network access... This portal is useful for registering devices that do not have a browser or supplicant

such as a gaming console or a smart TV."

3. Cisco Press

"Cisco ISE for BYOD and Secure Unified Access

2nd Edition"

Chapter 5

"Device Onboarding"

Section "My Devices Portal": This chapter details the BYOD process and explicitly states

"The My Devices portal is a web portal that allows users to manage their own registered devices... This is also the portal that is used to add devices that do not have a web browser or cannot perform the full onboarding process."

Scroll to Top