Cloud Managed Networks

Hey airheads, 

Just playing around with my first central NAC deployment and wondering what is needed to pull Intune data into client tags.

I've got a working setup with Intune UEM / Entra ID and client certificate deployed via SCEP. 

I can see entries for my Crowdstrike status but nothing showing from Intune. 

None of the Intune tags show any data:

My extensions are configured and working. 

Does this require some extra config or Pro licence?

-------------------------------------------

I believe you need Adv subs for the AP

------------------------------
If my post was useful accept solution and/or give kudos.
Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
------------------------------

-------------------------------------------

This is surprising. The licensing inclusions / exclusions between foundation / advanced WLAN and between Central NAC / NAC pro are very fuzzy.

-------------------------------------------

Original Message:
Sent: Mar 05, 2026 03:33 AM
From: nahiacastaneda
Subject: Central NAC - Intune Attributes / Client Tags

Hi everyone,

Just to complement the previous reply - I believe this might indeed be related to the subscription level.
From what I've seen, Intune‑based client attributes (device compliance, tags, posture, etc.) only populate when the APs are using an Advanced Central subscription.

With Foundation/Standard subscriptions, the integration can still connect (UEM / Entra ID / SCEP), but the Intune client tags typically remain empty, even if the extension is correctly configured.

It may be worth double‑checking the subscription tier assigned to the AP group, just to rule that out.

Hope this helps!

Best regards,
Nahia