Question

A network administrator is building an authorization profile in Cisco ISE for corporate laptops that authenticate via 802.1X. Security policy requires that each authenticated session be re-validated every 2 hours without disconnecting the endpoint if it is still active, and the timer value must be pushed to the switch as part of the RADIUS Access-Accept. Which configuration in the authorization profile accomplishes this requirement?

Accepted Answer

Enable the Reauthentication setting under Common Tasks, set the timer to 7200 seconds, and choose the RADIUS-Request maintain connectivity option

Answer

Configure a DACL that permits traffic for 7200 seconds and attach it to the authorization profile

Answer

Set the Session Timeout attribute to 7200 seconds with the Termination-Action set to Default

Answer

Enable MACsec policy with a 7200-second SAK rekey interval under the authorization profile