Cisco Cisco 3365 Mobility Services Engine Technical Manual

Next thing to do, is to go to Location tree, and click Get Update. This will allow ISE to fetch
Buildings and Floor from MSE, and make them available in ISE, Similar to when you add AD
Groups.

The attributes MSE:Map Location can now be used in authorization policies.

Configure the 2 below rules:

Users in Floor1 should be able to authenticate.

We see in the authentication details the correct profile, as well as MAP Location attribute

With the above configuration, if the endpoint is moving from one zone to another, it will not be