ISE acct-session-time to extend session period

Hello,
I want to avoid employees and contractors having to introduce user/password into the captive portal frequently. At lunch time for ex, if users wanna go out of the buildings and therefore out of the range of the WiFi network, I wanna configure Cisco ISE so that users don't have to introduce their credentials again. I found out the acct-session-time parameter to make it possible. I suppouse, if the user has already registered his device (or he/she has already acceded to the network, the calling-station-ID that's it, the MAC address is stored. Could I configure the authorization so that the MAC address is tested? I think the MAC address is stored in different instances, whether the device is registered (in MyDevice) or is detected in the first network connection.
Thanks a lot!

invalidate() is use to invalidate the session right..
But i am asking there is similar way to metion the time out period in servlets.

Similar Messages

Bought Creative Cloud Student. Download went fine. But! Before buying I still had some time on the "trial period" left.

Bought Creative Cloud Student and download went fine. But! Before buying I still had some time on the "trial period" left.
So now when the trial period has expired I cannot use the creative clouds apps (illustrator, photoshop etc) despite the fact that
I have payed for the "Creative Cloud student" offer?
What has happened and what should I do?

Log out of your Cloud account... Restart your computer... Log in to your paid Cloud account
-Sign in help http://helpx.adobe.com/x-productkb/policy-pricing/account-password-sign-faq.html
or
A chat session where an agent may remotely look inside your computer may help
Creative Cloud chat support (all Creative Cloud customer service issues)
http://helpx.adobe.com/x-productkb/global/service-ccm.html

How do you extend the period of a trend line of a graph?

Hi, I am having trouble extending the trendline of a graph. Can someone please tell me how to extend the period of the trendline?
Thank you.

Hi wildgherkin - have a look at this very good, cheap app that does what you want and more. It is fully compatible with imovie. You can export the file directly into an iMovie project if you want.
http://www.rqs.ca/RollingCredits/

How do I get my iMac not to go to sleep so quickly. Can that time be extended?

HOw do I get my iMac not to go to sleep so quickly? Can that time be extended?

you can also download an app called Caffeine. http://itunes.apple.com/us/app/caffeine/id411246225?mt=12

SAP NetWeaver trial version 4.0 extending trial period error

Hello.
I have installed successfully SAP NetWeaver trial version 4.0 After 30 days of trial, it stopped working because of period licensing. I have tried to extend this period installing a NSP.txt file from SAP. A successfull message apears after installing it, but nothing change, the licensing period does not change. And, to do it easier, the user SAP* has not privilegies to liberating my transport order, so I cannot download my work. A nasty experience, doesn't it?.
Does anyone know any solution? Thank you

Yes, I have done it already. There's one tmp license that I cannot delete, and a row with my new license that I have delete, install new one, success message but does not work.
I have tried to install a new period license before ending the previous one... I guess it could have influenced. Nevertheless I will try it again.

Displaying "Your Session is going to time out , Extend or Close" dialog ?

Hi!
we have a requirement to display a warning message to users just (1 minute) before the session is going to time out, and ask the user if he wants to extend the session or close the session( in which case we close the browser window). We have come up with a probable solution but would like to know what other people are doing/will do in similar scenarios.
Here is what we came up with:
1. On every page load we set/update a cookie which is meant to track the session time out. And we have a javascript timer that counts down user's inactivity. If any PPR occurs on the page, then we plan to add a hook to the PPR javascript calls so that we can update the time out cookie not only on page load/refreash but also on every PPR call made to the server.
We have a worry that we are doing everything on the client side solely depending on javascript.Is our approach in the right direction? Is there any better way to achieve the same? Are there any pitfalls/security issues involved in our design?
2. I have read in some articles/forum threads that we can poll the server on a regualr interval to find out the time remaining for the session to expire and once we get time to last minute we can display a javascript popup to the user. But I have a doubt that wouldn't polling itself refresh the user activity on the server and reset the session timeout to normal on every poll? In that case wouldn't we always get the same time-remaining info for every poll? Have I mis-understood some thing here? can some one explain how to implement the session time out based on polling to the server?
3. Any new ideas are welcome!
Thanks and Regards,
Samba

Hi,
well, if you use the af:poll command then the session will never expire because from a server point of view the user frequently sends a request. So if you prefer this option then you will have to expire the session programmatically calling invalidate() on the session
javaScript is the only option I can imagine that works without polling.
Frank

ISE-switchport session remain authenticated

I am facing a problem during deployment. Customer is using Avaya IP phone. If an autheticated workstation/laptop shift from one phone to another, the old switchport session remain there. The laptop acquire IP from new phone but even fail to ping gateway. If I do old phone reset or do 'clear authen sess interface', then laptop ping gateway. 'Clear arp' or 'clear mac-add table dynam' doesnt solve the issue. How can the ISE detect removal of a workstation to clear the authentication.

two ways:
CDP enhancement for second port disconnect (Cisco phones)
Proxy EAPoL-Logoff + inactivity timer (non-Cisco phones)
http://www.cisco.com/en/US/docs/solutions/Enterprise/Security/TrustSec_1.99/Dot1X_Deployment/Dot1x_Dep_Guide.html

Clear ISE live session

Is it possible to clear / delete an live session on the ISE (1.2)? There are some sessions which are really old and for sure not live or active.

There is no option to delete the live session on the ISE 1.2. You can choose an option from the within drop-down list to specify a time interval,
http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_mnt.html#wp1524371
Regards,
Jatin Katyal
*Do rate helpful posts*

ISE User Session Limiting

With ACS 5.3, you can set a limit on the number of concurrent sessions a single username is allowed. This feature is documented at http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.3/user/guide/access_policies.html#wp1176806. I am looking for something similar in ISE. Since ISE is based to a large extent on ACS for its RADIUS functionality, I would presume that it is there, but I don't see any means of setting it at this point. Does anyone know how to do this? I am running ISE 1.1.

FYI,
Release Notes for Cisco Identity Services Engine, Release 1.2
http://www.cisco.com/en/US/docs/security/ise/1.2/release_notes/ise12_rn.html

ISE Guest Portal Time Profiles

G'day All,
Could someone advise if it is possible to extended or change the time profile of a guest account that has already been created? I am trying to understand using time profiles from within the Sponsor Portal. Imagine a guest user has an account created that gives them 2 weeks access, towards the end of the 2 weeks the user requires another week of access.
From what I can see in both the ISE time profiles config page and from within the sponsor portal, either the user would have to wait until the existing account expired and have a new account created or a new account would have to be created to grant the additional access, and the existing account could be deleted, I am just seeking clarification of whether time extensions for Guest Accounts is possible prior to the account expiring.
Currently using ISE 1.1.3
Thanks in advanced guys.
James.

Please follow the below steps to edite the time profile:
Adding, Editing, or Duplicating Time Profiles
To add or edit a time profile, complete the following steps:
Step 1 From the Cisco ISE Administration interface, select Administration > Guest Management > Settings > Guest > Time Profiles.
Step 2 Click one of the following:
• Add—to create a new time profile
• Edit—to edit an existing time profile
• Duplicate—to duplicate an existing time profile
Step 3 Enter the name and description of the new time profile.
Step 4 Select a Time Zone for Restrictions. Time Restrictions are a set of time periods during which a guest account associated with that time profile would not be granted access to the network or guest portal.
Step 5 From the Account Type drop- down menu, choose one of the predefined options:
• StartEnd—allows sponsors to define start and end times for account durations
• FromFirstLogin—allows sponsors to define the duration of time that guests can have access after login
• FromCreation—allows sponsors to define the duration of time that guest can have access after account creation
Step 6 Set the Duration for which the account will be active. The account expires after the duration set here has expired. This option is available only if you select the Account Type as FromFirstLogin or FromCreation.
Step 7 Set the Restrictions for the guest access.
These restrictions are composed of a day of the week and a start and end clock time. The Time Zone value specified in the time profile affects the clock times set in any of the Time Restrictions within the time profile. For example, a Time Restriction that specifies Monday 12:00 am to 8:00 am and Monday 6:00 pm to 11:59 pm would only grant system access between 8:00 am and 6:00 pm on Mondays within the time zone of the time profile. Any other day of the week would have no time restriction in this example and system access would be granted at any time.
Step 8 Click Submit.

May I have an extended trial period for adobe photoshop cs6?

I had already a 30 days free trial period for adobel photoshop and I would like to know if I could get an extended free trial period as unfortunately I had no time left in my work schedule to properly try the photoshop cs6 downloaded.
Thank you for your understanding.
Best,
Jacques Olivar

I am sorry Tyrone41 there is no way to extend the trial period. If you wish to continue evaluating the software then please install the trial on another computer.

Cisco ISE: Non-complaint Timer for Users

Dear Folks,
What is the time for the non-complaint user state? How long a user stays in non-complaint state? and how to change the time?
Kindly respond fast.
Thanks,
Regards,
Mubasher

Posture Compliance Dashlet
The Posture Compliance dashlet summarizes the posture compliance in percentage, and Mean Time To Remediate (MTTR) data for the last 24 hour period, as well as 60 minutes from the current system time. It refreshes data every minute and displays it on the dashlet. You can invoke the Posture Detail Assessment report from the tool tips that are displayed on the 24 hour and 60 minutes spark lines for a specific period. The stack bars display the posture noncompliance distribution of endpoints by operating systems and the reason for failures of the requirements.
The MAC address is used as a key to calculate MTTR.
The dashlet provides you the following distribution details for the last 24 hour period, as well as 60 minutes from the current system time.
Posture   Compliance Dash let
Name
Description
Passed in percentage
Displays the percentage (passed   percentage) of posture compliance of endpoints by using posture compliance   and noncompliance of endpoints.
Mean Time to Remediate (MTTR)
Displays the mean time difference   between endpoints moving from the noncompliant state to the complaint state   based on the unique MAC address.
Operating System
Displays the noncompliance   distribution by operating system that is running on the client.
Reason
Displays the noncompliance   distribution by failures of posture conditions.
Please check the below link for configuration:
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_pos_pol.html

How to extend Posting period ??

Dear All,
My client wants us to extend the posting period from jan to next year's march, it means he wants the posting period more then a year,is it possible in SAP b1????

hello Angranshu...
Yes you can make a posting period extend beyond the year BUT there is a trick to it...
Create a posting period with code and name of "15 Months", Sub Periods of "Year". First time through put in the Post, Due, and Doc Dates of 01/01/2010 to 12/31/2010 and then "Add".
Then open up the posting period again and change all of the dates to 03/31/2011, enter "Update" and the dates will take...
I just did this in test system and it worked fine...
Hope that helps - Zal

ISE 1.2 Time Zone

Hi Community!!
I have a ISE 1.2 pair, v9 patch installed and sychronized. Recently our time zone changed to summer time which is one hour later. In the CLI I can see that the reference is sent by NTP and the clock has changed but in monitoring I can still see that there is an hour difference from real time.
I read in Cisco official documentation that time cannot be changed on ISE or else it will become unusable but the logs are not being timestamped correctly and also the time the RADIUS request are made by NAD vs the time they are recieved by ISE have one hour difference.
Is there a way to solve this? it seems to be prone to any kind of unexpected behaviour when we are least expecting it.
Thank you!!

Hmm, this is very strange and it almost seems like a bug with ISE. I would recommend that you contact TAC and have them check this out.
The reason I think that it is a bug (Related to the timezone) is the fact that the base OS (Cent/ADE OS) appears to be running fine and keeping track of DST (Day light savings) but the actual application (ISE) installed on Cent is not.
I am far from NTP or Linux expert but I don't believe that NTP pushes/honors timezones. I think NTP just synchronizes the clock while timezones/DST is controlled locally.
If the issue is not a bug, it is perhaps due to selecting the incorrect timezone. I have never done a deployment outside of the US and the UK so I am not familiar with timezones in Chile. However, if we take Eastern Time Zone for example. I had to make sure that I select "EST5EDT" in ISE and not just EST. If I simply selected EST then DST was not observed and made things ugly :) The same applied for Pacific timzone where I had to make sure that I select "PST8PDT" With all of that being said, I checked the CLI in ISE and I don't see any Chile related timezones that would indicate DST observations. You can check for those yourself by using the following command "show timezones"
I was able to find these but perhaps there are more and a specific one to CST/CLST. I tried searching for those but could not find anything:
NS-ISE-01/admin# show timezones | i Santiago
America/Santiago
NS-ISE-01/admin# show timezones | i Chile
Chile/EasterIsland
Chile/Continental
NS-ISE-01/admin# show timezones | i CLT
NS-ISE-01/admin# show timezones | i CLST
Let me know what you find. I would like to know the cause/resolution
Thank you for rating helpful posts!

How can I set up a program to stop at a certain time, or after a period of time?

I am using LabVIEW to measure dc voltages over a period of time. The data is exported into an Excel file. I would like to be able to set up the program to stop at a certain time, or after a certain number of hours. This way when I run a test that will start near the end of the week and would stop on say, Saturday, it will not continue to record all the data after that, which I do not need. I would love to be able to set a time for it to end, but I also wouldn't mind having it end, or stop recording data, after a certain voltage has been reached.

Its hard to say without knowing more about how your program is set up. Assuming the data aquisition is in a while loop, you can just wire a bunch of different stop conditions into a compound math node. Then right click on it and select "OR". A caveat about the comparisons I used in my little example: Comparing DBLs can lead to unexpected results when the two values are very close together.
Message Edited by jasonhill on 06-16-2006 10:59 AM
Attachments:
stop the loop.PNG ‏5 KB

ISE acct-session-time to extend session period

Similar Messages

Maybe you are looking for