Guest access authorization rule

[Peter Koltl]

What is the best practice with ISE 1.3 or 1.4 for a sponsored guest authorization rule condition? I've seen several approaches in various guides:

• Guest User identity group (Factory group in ISE)
• Activated Guest User identity group
• NetworkAccess:UseCase EQUALS Guest Flow
• GuestType_myguesttypename User identity group (created automatically by ISE if you create a guest type)
• GuestEndpoints Endpoint identity group (Factory group in ISE)

When to use which?

[jan.nielsen]

Not sure if there is actual "Best Practice", i myself use NetworkAccess:UseCase EQUALS Guest Flow and GuestType_name, and i sometimes use SSID name, if the solution has multiple open ssid's

[Peter Koltl]

thanks

can someone mention a scenario when we must use the Guest Flow UseCase?