we have experienced the following issue that Cisco TAC has declared as a bug.
When we used CONTAINS method to profile an endpoint by means its SNMP sysDescription attribute it doesn't identify it when it should.
This is an example in which it doesn't work as expected:
1. Information received from endpoint (Endpoint Identity)
2. Profiling policy configured to set as Cisco_SW_2960 every endpoints that CONTAINS c2960 in its SNMP:sysDescr attribute.
3. In the Endpoint Identity this switch appears as Cisco Device. Every weights and so on are ok, as Cisco TAC confirmed.
Cisco TAC proposed workaround: to use STARTSWITH instead of CONTAINS.
Affected ISE version: this happend to us with ISE 1.2.0.899.
Best Regards,
Jorge.
