topic ISE - NDG by location in Network Access Control https://community.cisco.com/t5/network-access-control/ise-ndg-by-location/m-p/2277103#M109371 <HTML><HEAD></HEAD><BODY><P>Yes you're right, It's "STARTS WITH", apologize for the confusion, but glad you got the right answer</P></BODY></HTML> Wed, 03 Jul 2013 13:34:48 GMT Eduardo Aliaga 2013-07-03T13:34:48Z ISE - NDG by location https://community.cisco.com/t5/network-access-control/ise-ndg-by-location/m-p/2277100#M109271 <P>Dears </P><P></P><P>i created policy based on devices location and i have location groups as below </P><P>.</P><P>• Company-&gt; Branch1</P><P>• Company-&gt; Branch2</P><P></P><P>when i choose Branch1 or Branch2 as my location Attribute in authorization policy the policies work fine and get matched but when i use "Company" as a location the policy never get matched even if this the only policy exists and the default policy get matched&nbsp; , so does this mean i can't use the parent group?</P> Mon, 11 Mar 2019 03:36:40 GMT https://community.cisco.com/t5/network-access-control/ise-ndg-by-location/m-p/2277100#M109271 eng.malak 2019-03-11T03:36:40Z ISE - NDG by location https://community.cisco.com/t5/network-access-control/ise-ndg-by-location/m-p/2277101#M109313 <HTML><HEAD></HEAD><BODY><P> You can use the parent group, but you have to choose "CONTAIN" instead of "EQUALS". I have done that without issue.</P><P></P><P>Please rate if it's helpful.</P></BODY></HTML> Wed, 03 Jul 2013 13:10:30 GMT https://community.cisco.com/t5/network-access-control/ise-ndg-by-location/m-p/2277101#M109313 Eduardo Aliaga 2013-07-03T13:10:30Z ISE - NDG by location https://community.cisco.com/t5/network-access-control/ise-ndg-by-location/m-p/2277102#M109352 <HTML><HEAD></HEAD><BODY><P><STRONG>thanks eduardoaliaga </STRONG>, in 1.1.4 "contains " doesn't exist but i used "starts with" and worked fine </P></BODY></HTML> Wed, 03 Jul 2013 13:30:48 GMT https://community.cisco.com/t5/network-access-control/ise-ndg-by-location/m-p/2277102#M109352 eng.malak 2013-07-03T13:30:48Z ISE - NDG by location https://community.cisco.com/t5/network-access-control/ise-ndg-by-location/m-p/2277103#M109371 <HTML><HEAD></HEAD><BODY><P>Yes you're right, It's "STARTS WITH", apologize for the confusion, but glad you got the right answer</P></BODY></HTML> Wed, 03 Jul 2013 13:34:48 GMT https://community.cisco.com/t5/network-access-control/ise-ndg-by-location/m-p/2277103#M109371 Eduardo Aliaga 2013-07-03T13:34:48Z