Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ISE max-login-ignore-identity-response

Hi forumers'

Greeting, I had a question regarding ISE login identity response.

In my POC deployment, i'm using a single testing domain user account at the testing Active Directory. I able to login to the testing's secure network using the same user credential over normal workstation and handheld device (Ex: iphone, ipad etc),  SIMUTANEOUSLY.

How do i can strengthen the authorization policy where

1. ISE max-login identity response only allow to 2 concurrent connectivity on maximum one user per workstation and/or handheld device.

example:

AD user-A conencting to 1 unit of workstation and 1 unit of iPhone at the same time. If user-A trying to connect another iPad this time should make the connection fail.

Can i fine tune and strengthen on this, thanks

Noel

  • AAA Identity and NAC
725
Views
0
Helpful
0
Replies
This widget could not be displayed.