topic Re: How to remove the mac address in ISE if not active for some period in Network Access Control

How to remove the mac address in ISE if not active for some period?

msompong1 — Thu, 02 Apr 2020 04:59:45 GMT

Hello,

I'm using the ISE 2.3 and I would like to know how can I remove the MAC address from internal database

in the condition of that MAC not access or not online for 90 days?

Thank you in advance.

Re: How to remove the mac address in ISE if not active for some period?

Damien Miller — Thu, 02 Apr 2020 05:21:08 GMT

This is a fairly easy task to accomplish with the built in endpoint purge options. What you do have to be cautious of though is if you have any endpoint assigned to static identity groups. A simple rule such as the one I have in the example screenshot will remove any endpoint that has been inactive for 90 days including ones manually added or statically assigned.

If the endpoint comes back after 91 days, it will no longer be "whitelisted". This can be a problem if interim accounting is not set up, coupled with no reauth interval or endpoints that are always connected and rarely power cycled.

Re: How to remove the mac address in ISE if not active for some period?

Cristian Matei — Thu, 02 Apr 2020 05:19:50 GMT

Hi,

Go to your Identity Management , Identities, The Identity Group you're looking for and you should be able to delete some or all.

Regards,

Cristian Matei.

Re: How to remove the mac address in ISE if not active for some period

MaErre21325 — Tue, 14 Mar 2023 09:13:40 GMT

Hello,

has anyone ever had ise automatically deleting mac addresses assigned to static groups without having set a purge rule?
I randomly find that I can no longer find some devices although no one has manually purged them and I can't find any bugs or reasons for this situation.
Ise version is 3.0 with patch7