Question

A network administrator wants ISE to enrich endpoint profiling data by resolving the fully qualified domain name (FQDN) associated with an endpoint's IP address. The DNS probe is enabled, but ISE is not populating the FQDN attribute for any endpoints. Which condition must be satisfied for the DNS probe to successfully collect the FQDN?

Accepted Answer

At least one other probe (such as DHCP, RADIUS, SNMP, or HTTP) must first learn the endpoint's IP address before the DNS probe can perform a reverse lookup

Answer

The DNS probe must be paired with the NetFlow probe to correlate flow records with hostnames

Answer

SNMP trap configuration must be enabled on the DNS server so it can push PTR records to ISE

Answer

The endpoint must have an active 802.1X session with an authorization profile that includes a downloadable ACL