topic Re: ISE Identity Group Assignment in Network Access Control

ISE Identity Group Assignment

descalante2007 — Mon, 11 Mar 2019 03:24:00 GMT

I need to avoid a large set of devices to get access to Internet through the Wireless Guest Service. I had made some test and know I can block a MAC address through the Policy Authorization (If Blacklist then DenyAccess).

In order to blacklist a large set I would like to import the MAC list and include in the CSV the Identity Group Assignment. It appears it is not possible ... I can have an easy way to change the Identity Group Assignment instead of one by one?

Regards.

Daniel Escalante.

Re: ISE Identity Group Assignment

descalante2007 — Mon, 06 May 2013 21:44:46 GMT

Additional Information and Question:

Currently my Authorization Policy has this:

The result is that any user trying to acesss the Guest Service can see the Guest Portal, introduce Credentials and if they are valid, the AUP is displayed, after that if the device is in the Blacklist, service is denied and the Guest Portal is displayed again, but any message about the situation is indicated to the user. I wonder if I can generate a message and even avoid the AUP if the device is in the blacklist.

Any comment will be greatly appreciated.

Regards.

Daniel Escalante

ISE Identity Group Assignment

manjeets — Wed, 15 May 2013 09:37:42 GMT

Kindly review the below link:

https://www.cisco.com/en/US/docs/solutions/Enterprise/Security/TrustSec_2.0/trustsec_2.0_dig.pdf