Layer 2 Security Group Tag (SGT) of 16 bits is assigned to endpoint session by ISE, it is needed to support the TrustSec 802.1Q header to inspect the content. It can be done by WIJungle Appliances to drop the packet if SGT matches with 802.1Q(0x8909) headers.
Navigate to command line and execute:
config enable sgt_protection add tag 100