Question - User Identity Included in MyDevices Entered MAC Address in LiveLog

[kkaminsk]

Hi Folks,

Using ISE 2.4 I noticed that when a user enters a MAC Address in MyDevices and it gets assigned to the RegisteredDevices endpoint group, the user identity appears in the Livelog.

I was doing a customer POC with ISE 2.2 and could not get the identity of the owner to appear.  Is there a setting that controls this?  Or is it a later feature added post 2.2?

Thanks,

[Arne Bier · Accepted solution]

If I recall, this was done to allow the Remember Me feature to work nicely for the Guest flow. Typically, after a Guest logs into the portal then the MAB auth in LiveLog will show the guest@whatever. But ISE was broken in that when the NAS Session timed out, then the subsequent MAB auths would result in the username being the MAC address. Which is not very nice at all. It's a cosmetic fix that allows LiveLog to show that relationship between Identity and MAC address.

[hslai]

Arne Bier is correct and he contributed 

ISE 2.3+ Remember Me guest using guest ... - Cisco Community

[Jason Kunst]

Current recommend long term release is 2.4 with latest patch. Would recommend any new POC to work with that

https://community.cisco.com/t5/security-blogs/announcing-the-quot-suggested-release-quot-status-of-ise-2-4/ba-p/3775587