300-715 · Question #238
A user changes the status of a device to stolen in the My Devices Portal of Cisco ISE. The device was originally onboarded in the BYOD wireless Portal without a certificate. The device is found…
The correct answer is B. Change the device state from Stolen to Not Registered. To allow re-onboarding of a recovered BYOD device previously marked as stolen and moved to the Blocklist, the user must change the device state from 'Stolen' to 'Not Registered' in the My Devices Portal.
Question
A user changes the status of a device to stolen in the My Devices Portal of Cisco ISE. The device was originally onboarded in the BYOD wireless Portal without a certificate. The device is found later, but the user cannot re-onboard the device because Cisco ISE assigned the device to the Blocklist endpoint identity group. What must the user do in the My Devices Portal to resolve this issue?
Options
- AManually remove the device from the Blocklist endpoint identity group.
- BChange the device state from Stolen to Not Registered.
- CChange the BYOD registration attribute of the device to None.
- DDelete the device, and then re-add the device.
How the community answered
(58 responses)- A2% (1)
- B79% (46)
- C7% (4)
- D12% (7)
Why each option
To allow re-onboarding of a recovered BYOD device previously marked as stolen and moved to the Blocklist, the user must change the device state from 'Stolen' to 'Not Registered' in the My Devices Portal.
Users cannot manually remove a device from an Endpoint Identity Group directly from the My Devices Portal; this is an administrator-level task.
When a user marks a device as 'Stolen' in the My Devices Portal, Cisco ISE assigns it to the Blocklist identity group. To enable re-onboarding for a recovered device, the user must explicitly change its state back from 'Stolen' to 'Not Registered' or a similar option, which removes it from the Blocklist and allows it to restart the BYOD onboarding process.
Changing the BYOD registration attribute to 'None' is not a standard user action in the My Devices Portal for recovering a stolen device; the specific action is usually reverting the 'stolen' status.
Deleting the device and re-adding it is a more drastic measure; typically, simply changing the status via the portal is sufficient to trigger the re-onboarding flow.
Concept tested: Cisco ISE My Devices Portal management for BYOD
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_chapter_0110.html
Topics
Community Discussion
No community discussion yet for this question.