IoT Device Classification

Endpoint Identity Groups

Create logical groupings:

IoT-Devices
├── IoT-Cameras
├── IoT-Printers
├── IoT-Phones
├── IoT-Displays
└── IoT-Unknown

Profiler Policies

Camera Profile

Name: IP-Camera
Conditions:
  DHCP Class Identifier CONTAINS "camera"
  OR MAC OUI IN (Hikvision, Axis, Dahua)
Certainty Factor: 20

Printer Profile

Name: Network-Printer
Conditions:
  DHCP Vendor Class CONTAINS "printer"
  OR Destination Port EQUALS 9100 (JetDirect)
  OR Destination Port EQUALS 515 (LPR)
Certainty Factor: 20

Static Assignment

For devices that can’t be auto-profiled:

  1. Find endpoint in Context Visibility > Endpoints

  2. Manually assign to identity group

  3. Set Static Assignment = Yes