Question

A retail company uses ISE self-registered guest access. Security requires that guest accounts remain valid only during a visitor's stay and that the sponsor be able to immediately terminate active guest sessions when a visitor leaves early. Which sponsor portal capability must be enabled in the sponsor group settings to meet the requirement of immediately terminating an active guest's network access?

Accepted Answer

Grant the sponsor group the permission to suspend and reinstate guest accounts, which triggers a CoA to disconnect the active session

Answer

Configure a shorter Time Profile so the guest account expires at the end of the day

Answer

Enable the endpoint purge policy to delete the endpoint after 30 days of inactivity

Answer

Set the guest type maximum simultaneous logins to 1 so only one session is active