topic Date Limiting a User / ISE Date Format in Network Access Control

Date Limiting a User / ISE Date Format

DAVID NOONAN — Mon, 11 Mar 2019 06:20:41 GMT

Just rolled out .1x for employees and the very next week someone brings in a contractor. They're not in LDAP so I'm planning to creating a user internal to ISE but I'd like to set a date limit on their access rather than trust someone to come back and disable them later.

They'll need internal access or I'd add a guest account with a time limit.

What's the best way to go about this?

I found the Session:CurrentDate attribute and I assume I could use that in an authorization policy if I knew what date format it wants. After playing with it a bit I almost think it wants to add multiple attributes, one for day, one of month and one for year.

What I'd prefer to a hard date would be "30 days from X" but I suspect that won't be possible.

Thanks

Ended up finding my own

DAVID NOONAN — Tue, 22 Dec 2015 14:50:38 GMT

Ended up finding my own answer.

Under Policy > Policy Elements > Common there's a Time and Date section. You can use this to build conditions based on day of week, date range, etc.

David, good job on finding a

nspasov — Wed, 23 Dec 2015 22:27:55 GMT

David, good job on finding a solution to your own problem! I had the thread marked to comment on but have been busy 🙂 Also, thank you for taking the time to come back and share the solution with everyone here (+5 from me!)

Now, if your issue is resolved, you should mark the thread as "answered" 🙂

I don't see where to mark it

DAVID NOONAN — Tue, 05 Jan 2016 12:56:29 GMT

I don't see where to mark it answered. I see a Correct Answer button on your reply but not one on mine and I don't see an answered option anywhere else.

Re: Date Limiting a User / ISE Date Format

melivill — Mon, 13 Jan 2025 18:48:00 GMT

TY!