topic Re: Guest ticket creation (same day) in Network Access Control

Guest ticket creation (same day)

mailman — Thu, 24 Jan 2019 09:18:44 GMT

By today it seems to be impossible to create a guest ticket on a certain time of day until a certain time of the same day. You always have to end the ticket on the next day or have to run it until end of business day which also implies that the ticket will start right after creation. There is a need to create guest tickets for a certain time (duration or exact time ) for the same day. Maybe a feature request!

Re: Guest ticket creation (same day)

Jason Kunst — Thu, 24 Jan 2019 12:14:57 GMT

Not sure of the issue

When you create an account you choose the start and end. Or you can create using a duration.

What is the critical need use case?

Also you can use from first login in ISE 2.2+ which allows you to create an account good for X hours from first login

https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/sponsor_guide/b_spons_SponsorPortlUserGuide_22/b_spons_SponsorPortlUserGuide_22_chapter_01.pdf

Feature request would go through http://cs.co/ise-feedback

Re: Guest ticket creation (same day)

Jason Kunst — Thu, 24 Jan 2019 13:46:57 GMT

Recommend you are on 2.2 at least, new recommendation is 2.4

Re: Guest ticket creation (same day)

mailman — Thu, 24 Jan 2019 18:04:52 GMT

Re: Guest ticket creation (same day)

mailman — Thu, 24 Jan 2019 18:09:54 GMT

We are on 2.3 release and yes you can create a ticket (end of business day or from the first login), but thats not the ask!
Customers need is to create tickets lets say from 10am today up to 2pm today! It should only be valid for this time period and from that specific time and date. ISE is unable to create tickets with this requirements for the same day...

Re: Guest ticket creation (same day)

paul — Thu, 24 Jan 2019 21:29:47 GMT

If ISE could do this how would you envision enforcing this? The only way you can do time and date checks is to force the user to come back to the portal. Are you going to kick the users off every hour and force them back to the portal just so you can check to see if their account is still valid?

Re: Guest ticket creation (same day)

mailman — Fri, 15 Feb 2019 11:18:04 GMT

Hi Paul, i didnt get your point here...Where is the difference in your argumentation between a valid ticket creation for e.g. today 3pm until tomorrow 3pm and the unvalid creation for a ticket from today 3pm until 9pm today?

I still think this should be discussed within the BU to make this valid customer request working....

regards

Michael

Re: Guest ticket creation (same day)

paul — Fri, 15 Feb 2019 12:37:44 GMT

The point was how would you think this would work. The only way to check the validity of an account is bring the user back to the guest portal. So lets' say your minimum ticket time is 1 hour. This means.

1) All guests connect at 9:00 a.m.

2) They all get kicked off at 10:00 a.m. in the middle of what they were doing and have to go back to the guest portal to sign in. The ones who ticket are still good get another hour of guest time.

3) They all get kicked off at 11:00 a.m. in the middle of what they were doing and have to go back to the guest portal to sign in. The ones who ticket are still good get another hour of guest time.

4) Repeat all day

So you say well we wouldn't do 1 hour tickets, maybe 4 hours minimum. So once in the middle of the day all the guests get kicked off that connected in the morning. Makes for an annoying guest experience.

In the standard setup the endpoints are purged at 3:00 a.m. in the morning so the guests are good all day without disruption.

Re: Guest ticket creation (same day)

Jason Kunst — Fri, 15 Feb 2019 16:59:44 GMT

Please provide http://cs.co/ise-feedback to the product managers