What is the best way to add Rejected MAC / DenyAccess into certain Identity group for allowed access?

[getaway51]

Hi,

I view in ISE log and saw Auth Failed, authorization -DenyAccess for a device. How can i quickly add these devices into the relevant identity group so that it can be authorized?

[#Mat · Accepted solution]

Hi, you can create an authz rule to permit a particular identity group. Then from context visibility, you can assign an endpoint to that identity group.

Regards.-

HTH.

[getaway51]

. Hi,


Then from context visibility, you can assign an endpoint to that identity
group.

Whts the best way to assign ep mac to an identity grp?