Higher Education

 View Only
last person joined: 16 days ago 

Got questions on how to enable mobility in education? Submit them here!
Expand all | Collapse all

Endpoint Profiler

This thread has been viewed 3 times
  • 1.  Endpoint Profiler

    Posted Mar 24, 2017 05:19 PM

    Any idea why Apple TV's are showing up under the SmartDevice catagory instead of Home Audio/video Equipment?



  • 2.  RE: Endpoint Profiler

    EMPLOYEE
    Posted Mar 24, 2017 06:11 PM
    Unfortunately Apple uses the same DHCP fingerprint, OUI blocks and operating system on the Apple TV and it will sometimes get profiled as a generic iOS device.


  • 3.  RE: Endpoint Profiler

    Posted Mar 25, 2017 12:41 PM
    How can we reliably get appletvs profiled? They require specific inbound permissions and therefore specific policy enforcement, so it's necessary to profile these correctly. Advice?

    ===========
    Ryan Holland
    (sent while mobile)


  • 4.  RE: Endpoint Profiler

    EMPLOYEE
    Posted Mar 25, 2017 12:51 PM
    We have not found and distinct profile information on many models. The general recommendation has been to leverage Device Registration or use EAP-TLS on these devices and leverage certificate properties for policy.


  • 5.  RE: Endpoint Profiler

    Posted Mar 25, 2017 07:08 PM
    For device registration though, how do we ensure the device being registered as an AppleTV is actually an AppleTV?
    For EAP-TLS, what methodology do you recommend to create a certificate for the device with the appropriate properties since the AppleTV cannot “click through” any on boarding workflow?


  • 6.  RE: Endpoint Profiler

    EMPLOYEE
    Posted Mar 25, 2017 07:11 PM
    In policy, you can leverage the IF-MAP data that will confirm it's an Apple TV and compare that to how it was registered.

    For the certificate piece, university ATVs can be enrolled using Apple Configurator.


  • 7.  RE: Endpoint Profiler

    MVP
    Posted Mar 25, 2017 08:32 PM
    What about student or faculty owned devices?

    Bruce Osborne
    Sent from my iPhone


  • 8.  RE: Endpoint Profiler

    EMPLOYEE
    Posted Mar 25, 2017 08:34 PM
    You can just leverage device registration with AirGroup for the personal devices.


  • 9.  RE: Endpoint Profiler

    MVP
    Posted Mar 25, 2017 08:36 PM
    Does that verify it is an Apple TV?

    Bruce Osborne
    Sent from my iPhone


  • 10.  RE: Endpoint Profiler

    EMPLOYEE
    Posted Mar 25, 2017 08:38 PM
    You would let the use register it as a media player and then in policy verify the profile and IF-MAP data. This is a common deployment.