Controlling access to network resources based on the identity of the device used, not the user's identity

You can use the device identity feature for network access control based on the device's identity. There are various reason you might want to use this feature: you might not know the identity of a user, you might not want to use a captive portal to authenticate users, you might not have a network access control system, or you might have switches that do not support 802.1. This feature allows you to configure a device profile that defines attributes of a device that match a number of devices. You specify the device profile name in a security policy to determine how traffic from matching devices is handled.