ISE V3.0 Max Concurent Sessions

[phyowaitun]

Dear Friends And Experts,

I am using ISE v3.0. Can i limit maximum user/groups for AD ?

Regards,

Phyo.

[balaji.bandi]

As per my understanding check the below link - is this what are you looking for?

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-22/204463-Configure-Maximum-Concurrent-User-Sessio.html#anc14

[phyowaitun]

Dear Balaji.bandi,

Tks. That solutions only worked for internal user only.

I want to limit maximum concurrent sessions per AD's user/group.

For normal user, they will be limited up to 1 device per concurrent sessions.

For VIP user, there will be unlimited devices per concurrent sessions.

I managed to make it work by adding AD user manually to internal user. The password type will be use from AD.

But this workaround need to add user manually not a good practice for Enterprise.

Regards,

Phyo.

[thomas · Accepted solution]

Limiting maximum devices is done in Administration > System > Settings > Max Sessions.

You may specify the Maximum Sessions for all users - including AD groups - under the User tab.

There is no ability to limit - or unlimit in your case - by AD group - only Internal Groups.