Environment : All the ClearPass versions.
Endpoint Attributes can be used to derive the service rules to categorize the service for client authentication.
Note: Endpoint attributes added manually (or) updated by system (or) polled from MDM servers can be used in the service rules. Endpoint information updated by profiler will not be available in service rules derivation.
Please find below few examples.
The above examples are for the following service categorization,
Fig1 : Radius 802.1x service categorization for MDM enabled devices or devices updated from any MDM server.
Fig 2 & 3 : Health check service categorization for Desktops and Laptops. Where 2 different policies can be applied for desktops and laptops.