topic Re: Endpoint Purge for Static Assigned Endpoints in Network Access Control

Endpoint Purge for Static Assigned Endpoints

chadmi — Wed, 08 Feb 2017 14:52:19 GMT

All,

Many customers use static MAC filter lists in my patch and would like to have the purge function apply to those endpoints as well. As it sits right now the InactiveDays only applies to Profiled endpoints and many of my customers are not using profiling at this time. Is there a way today or can the request be submitted to have the InactiveDays value apply to staticly assigned MAC addresses and be updated based on last logged in date/time?

Thanks,

Chad

Re: Endpoint Purge for Static Assigned Endpoints

hslai — Thu, 09 Feb 2017 05:39:54 GMT

I found an on-going TAC case and ISE ESC case on the same issue. If that is one of your cases, please continue working with our TAC and ESC teams.

Re: Endpoint Purge for Static Assigned Endpoints

chadmi — Thu, 09 Feb 2017 12:52:16 GMT

Not my case. Here is the problem, this is only updated when profiling is enabled per the documentation.

What we need is for this to work on non-profile enabled systems as well.

o When there are updates from endpoint, InactivityDays will be reset to 0 only if profiling is enabled.

http://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_01100.html#concept_0776B37A2C3542189950F5DFB1961FA2

Re: Endpoint Purge for Static Assigned Endpoints

thomas — Tue, 18 Apr 2017 16:00:19 GMT

I've submitted this thread's feature request to our PMs.