A Cisco ISE administrator needs to ensure that guest endpoint registrations are only valid for one day. When testing the guest policy flow, the administrator sees that the Cisco ISE does not delete…

The Endpoint Purge Policy in Cisco ISE dictates how long inactive or guest endpoints remain in the endpoint identity store before being automatically deleted. If this policy is set to 30 days for guest devices, endpoints associated with guest access will persist for that duration, regardless of any guest account validity, allowing them to reconnect and gain access if their MAC address is still known to ISE.

A RADIUS policy set to allow repeated authentication primarily affects the re-authentication behavior of a known endpoint, but it does not cause the endpoint's record to remain indefinitely in the identity store if it should have been purged.

The length of access set in Guest Portal Settings typically refers to the validity period of the guest account itself, not the retention period of the endpoint in the identity store.

The Guest Account Purge Policy specifically removes guest accounts from the internal database, which is distinct from the Endpoint Purge Policy that removes the endpoint (MAC address) entry allowing re-authentication.