Authorization policy does not match for SessionLimitExceeded condition

[rezaalikhani]

Hi all;

In my scenario, I want Contractor guests to have only one simultaneous session to ISE. If they exceed this limitation, a message will appear for them. Therefore, I have configured the settings based on the following:

I also created the following authorization rule for this purpose:

For testing purpose, the guest user logins to the portal without any problem as you can see below:

Now the same guest user tries to access the network using another system:

Now the same user tries to login from the second system:

After login, he connects to the network without any problem.

The strange thing is that, after inspecting the created authorization rule for exceeded guests, nothing has been matched with the rule as you can see below:

Any ideas?

Thanks

[hslai · Accepted solution]

@rezaalikhani Try removing the library condition Guest_Flow, as done at ISE Guest - Configure Maximum Simultaneous Logins for Endpoint Users