Practical Deployment of Cisco Identity Services Engine (ISE)

194 13. BYOD DESIGNS

Once in the URL List, add the URL for Google Play store which is “play.google.com” at the

time of this writing.

The way this works is that the WLC will snoop DNS requests looking for requests going to

play.google.com and whitelist up to 20 IP addresses for those transactions dynamically. This

is generally sufcient for the client to download the application from Google Play.

12

At this point you’re ready to actually onboard a device but not so fast. You still need Au-

thC and AuthZ rules that you will use after you’re done onboarding to gain network access.

Those rules should have a couple of important attributes:

• The AuthC ...