A Cisco ISE administrator needs to ensure that guest endpoint registrations are only valid for 1 day. When testing the guest policy flow, the administrator sees that the Cisco ISE does not delete the endpoint in the GuestEndpoints identity store after 1 day and allows access to the guest network after that period. Which configuration is causing this problem?

By | November 26, 2022

  • A. The Guest Account Purge Policy is set to 15 days.
  • B. The length of access is set to 7 days in the Guest Portal Settings.
  • C. The Endpoint Purge Policy is set to 30 days for guest devices.
  • D. The RADIUS policy set for guest access is set to allow repeated authentication of the same device.
Answer: Option C.
Explanation: 

Reference: https://www.cisco.eom/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/ b_ise_admin_guide_sample_chapter_01101.html#concept_0776B37A2C3542189950F5DFB1961FA2

The post A Cisco ISE administrator needs to ensure that guest endpoint registrations are only valid for 1 day. When testing the guest policy flow, the administrator sees that the Cisco ISE does not delete the endpoint in the GuestEndpoints identity store after 1 day and allows access to the guest network after that period. <br>Which configuration is causing this problem? appeared first on Majanto.