Question

A network administrator is building a custom profiler policy in ISE to identify a fleet of newly deployed medical infusion pumps. The devices consistently report a specific DHCP class-identifier value AND their MAC OUI belongs to a known vendor. The administrator wants the endpoint to match this custom profile only when BOTH attributes are present, and wants the endpoint to be assigned to the matching group only once the total certainty factor reaches the configured Minimum Certainty Factor. How should the administrator configure the profiler policy rules to meet this requirement?

Accepted Answer

Create two separate profiling conditions and combine them in a single rule using a logical AND, ensuring the combined certainty value meets or exceeds the policy's Minimum Certainty Factor

Answer

Create two separate rules each using a logical OR so that either the DHCP or the OUI condition alone satisfies the Minimum Certainty Factor

Answer

Set the Minimum Certainty Factor to 0 so that any single matched attribute immediately assigns the endpoint to the profile

Answer

Enable the Exception Action on the policy so the endpoint is statically assigned whenever the DHCP class-identifier is seen