Cisco ISE

Use Cisco ISE to verify device identity using the Globally Unique Identifier (GUID), even when MAC address randomization is enabled.

The Cisco Identity Services Engine (ISE) feature in Global Settings improves SOTI MobiControl’s ability to validate enrolled and compliant devices before they connect to enterprise networks. It uses the device’s Globally Unique Identifier (GUID) instead of the MAC address to ensure reliable identity verification, even when MAC randomization is active. This applies to iOS and Android devices.

Many organizations use Cisco Identity Services Engine to manage secure device access. With this integration, SOTI MobiControl sends the device’s GUID to Cisco ISE v3.0, which verifies enrollment, compliance status, and authorization. This process helps prevent unauthorized or spoofed devices from accessing protected resources, especially in BYOD or mobile-first environments.

The integration also supports Cisco ISE v3.0 APIs for device identification, compliance checks, and certificate validation. While Basic authentication is currently required by Cisco ISE for API communication, OAuth and certificate-based methods are not supported at this time.

Organizations currently using Cisco ISE v2.0 are unable to detect certificate spoofing or validate devices with randomized MAC addresses. Upgrading to Cisco ISE v3.0 integration with SOTI MobiControl provides stronger security, especially for Wi-Fi networks and BYOD environments.

Cisco ISE toggle button in Global Settings.

(1) To enable Cisco ISE, select the Enable Cisco ISE toggle. This ensures consistent, policy-based access control by allowing Cisco ISE to accurately identify devices, even when MAC address randomization is active.

Key Capabilities:

  • Supports device GUID-based identity verification
  • Enables access control when MAC address randomization is enabled
  • Verifies enrollment, compliance status, and certificate validity using Cisco ISE v3.0 APIs

Business Benefits:

  • Strengthens network security and reduces the risk of unauthorized access
  • Improves support for BYOD and mobile-first environments
  • Keeps security architecture aligned with Cisco’s latest features and protocols

Limitations:

  • Basic authentication is currently the only supported protocol for integration with Cisco ISE