topic Re: Guest Pending Account Purge in Network Access Control

Guest Pending Account Purge

paul — Thu, 13 Apr 2017 20:42:45 GMT

What setting in ISE controls the purging of pending guest accounts? I am doing single click guest acceptance. I know I can control how long the single click link is good for, but if sponsor doesn't approve the guests and they Pending list just continues to grow, what setting purges that out?

I know there is the "Expire portal-user information after:" setting. Does that setting affect pending accounts? Or is there any way just to target the pending guest list?

I am sure I am just missing it in the documentation. Jason, you can RTFM me.

Thanks

Re: Guest Pending Account Purge

Charlie Moreton — Thu, 13 Apr 2017 21:06:50 GMT

Have you tried through the Sponsor Portal?

Re: Guest Pending Account Purge

paul — Thu, 13 Apr 2017 21:11:08 GMT

Ohh I know I can do it through the sponsor portal, but looking for a way to purge automatically, i.e. if pending guest account is not approved or denied in 3 days remove it from the system.

Paul Haferman

Office- 920.996.3011

Cell- 920.284.9250

Re: Guest Pending Account Purge

Jason Kunst — Thu, 13 Apr 2017 21:42:20 GMT

Quickly found this, 2.2 has under work centers guest access and has slightly changed

Check the 2.2 doc of same and look at the UI

http://www.cisco.com/c/en/us/td/docs/security/ise/2-0/admin_guide/b_ise_admin_guide_20/b_ise_admin_guide_20_chapter_01110.html

Re: Guest Pending Account Purge

paul — Thu, 13 Apr 2017 21:47:44 GMT

Yes the screen I was looking at was:

It is just unclear is any of those settings apply to Pending Accounts. I think unused guests may work. I will have to run some tests.

Paul Haferman

Office- 920.996.3011

Cell- 920.284.9250

Re: Guest Pending Account Purge

ryan_bell — Thu, 30 Jan 2020 21:15:59 GMT

The documentation Ive read only speaks of expired accounts or denied accounts, though pending guest accounts seem to just keep growing and growing unless manually deleted or denied. I'd also like these to be automatically purged as well with the expired & denied accounts. Is this possible or is this just a manual process for now?

Re: Guest Pending Account Purge

Jason Kunst — Thu, 30 Jan 2020 22:23:40 GMT

This is an old thread, perhaps you want to start new one? Regardless, What version of ise are you using? For best guest functionality you should at least be on 2.4 (2.6 is current recommended version now) I am pretty sure that newer recommended versions of ISE have cleaned this up. It’s even mentioned in the UI under guest purge settings.

https://community.cisco.com/t5/security-news/announcing-ise-2-6-as-suggested-release/ba-p/3953488