topic Re: Guest's client not assigned to Endpoint Group as per Guest User co in Network Access Control

Guest's client not assigned to Endpoint Group as per Guest User config

bassomarco1998 — Thu, 17 Oct 2024 10:24:35 GMT

Hi all,

I'm encountering an unusual issue with the Guest authentication process. We have a sponsor portal where each guest registering is assigned the "Self_Guest" type.
We've configured the "Self_Guest" user type to store client MAC addresses in a specific Endpoint Identity Group (EIG) called "Guest_Group."
However, after several attempts, I noticed that the client MAC addresses are being saved in the default "Unknown" EIG rather than the "Guest_Group" EIG as intended.
Since our AuthZ policies rely on the correct EIG, this is preventing proper guest authentication.
Has anyone experienced this issue before?
Thanks

Re: Guest's client not assigned to Endpoint Group as per Guest User co

balaji.bandi — Thu, 17 Oct 2024 11:14:23 GMT

Personally i would not suggest MAC address using for Guest Authenticaiton.

New devices have Random MAC, then you will end up different results.

random MAC example for guest user :

https://www.ise-support.com/2020/09/20/guest-access-and-randomized-mac-addresses/

Re: Guest's client not assigned to Endpoint Group as per Guest User co

ahollifield — Thu, 17 Oct 2024 11:34:46 GMT

Why not use the GuestFlow condition instead?

Re: Guest's client not assigned to Endpoint Group as per Guest User co

Aref Alsouqi — Thu, 17 Oct 2024 15:45:49 GMT

Would you mind sharing the screenshots of how you configured the "Self_Guest" user type for review?