ISE1.3 - Number of device per guest user account

[Sandeep Choudhary]

Hello,

"ISE1.3 - Number of device per guest user account"

Is there a way to limt the allowed number of sessions per guest account ?

I only allowed to connect one device per guets account but as we all know that ISE guest Usernames are not case sensitive.So guest are using Capital/small letter to login multi device with same credentials.

Thanks

[Sandeep Choudhary]

Security experts: could you please suggest me to resolve this issue!!!!

[Ivan Gonzalez]

Hello Sandeep,

It seems to be this can not be limited based on ISE configuration, but you can do it on the WLC settings under the following section:

Choose Administration > Web Portal Management > Settings > My Devices > Portal Configuration.

Note: Please mark it as answered if applicable

[Sandeep Choudhary]

there is no link on WLC as you mentioned above.

Regards

[Ivan Gonzalez]

Hello Sandeep,

I am sorry, actually this is configured on ISE on that specific path:

Step 1 Choose Administration > Web Portal Management > Settings > Guest > Portal Policy.

Step 2 Check the Allow only one guest session per user option.

-This is documented on ISE user guide ( looks like this feature is added from ISE 1.2 version and above )

http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_guest_pol.html#pgfId-1476405

[Sandeep Choudhary]

Yes I already did on my ISE 1.3 version.But no success.

The problem is with username assigned by sponsor-portal which is not case sensitive.

Regards