Hi Marvin, first, you would want to ensure the router or switch you use has support for SG-ACLs and enforcement via:http://www.cisco.com/c/en/us/solutions/enterprise-networks/trustsec/trustsec_matrix.html One you know that works, you can configure SG...

Okay, gotcha. Unfortunately ISE writing to AD isn't possible. What I meant is that you could pull data from the API, and then write a script to push the retrieved guest accounts and write them to AD via LDAP. I've not seen someone do this before, so ...

For Self-Registered Guest, you can configure it to automatically approve these users in the Portal Behavior tab. You can choose between SMS, Email, or both.

Hey Mohamed, 1.3, like 1.2, stores guest users in it's internal database. We don't have a mechanism to write to AD via ISE, unfortunately. However, you could create a solution for this on your own via REST API queries to ISE. See our REST API guide t...