Question

A company runs an ISE deployment where front-desk receptionists must be able to create guest accounts, but only for daily visitors whose access automatically expires the same business day. Contractors, however, need multi-week accounts created by the IT team. The security architect wants to ensure receptionists cannot create the longer-lived contractor accounts. Which ISE configuration approach enforces this requirement?

Accepted Answer

Assign the receptionists' sponsor group only the guest type that maps to the daily time profile, and restrict the multi-week guest type to the IT sponsor group

Answer

Configure a single guest type for all users and rely on the guest portal's AUP to limit receptionists' account durations

Answer

Create one sponsor portal for all sponsors and use an authorization policy to expire receptionist-created accounts at end of day

Answer

Enable self-registration on the guest portal so visitors set their own expiration, removing the need to differentiate sponsor groups