topic ISE - Identity group question in Network Access Control https://community.cisco.com/t5/network-access-control/ise-identity-group-question/m-p/1969436#M186079 <HTML><HEAD></HEAD><BODY><P> Hi,</P><P></P><P>You can create the policy so that the ad external group attribute is a component of the policy.</P><P></P><P>When add a new condition on the left hand side select the advanced option, there you will see AD the select the external group attribute.</P><P></P><P>From there you can choose the operator followed by the value, which you selected in the groups tab under the Ad settings.</P></BODY></HTML> Sat, 11 Aug 2012 23:16:51 GMT Tarik Admani 2012-08-11T23:16:51Z ISE - Identity group question https://community.cisco.com/t5/network-access-control/ise-identity-group-question/m-p/1969435#M186068 <P>Is there a way to map external active directory groups to internal? Looks like I can only use internal groups in posture policy and client provisioning policy. Is that correct?</P> Mon, 11 Mar 2019 02:24:41 GMT https://community.cisco.com/t5/network-access-control/ise-identity-group-question/m-p/1969435#M186068 Jeppe Flensted 2019-03-11T02:24:41Z ISE - Identity group question https://community.cisco.com/t5/network-access-control/ise-identity-group-question/m-p/1969436#M186079 <HTML><HEAD></HEAD><BODY><P> Hi,</P><P></P><P>You can create the policy so that the ad external group attribute is a component of the policy.</P><P></P><P>When add a new condition on the left hand side select the advanced option, there you will see AD the select the external group attribute.</P><P></P><P>From there you can choose the operator followed by the value, which you selected in the groups tab under the Ad settings.</P></BODY></HTML> Sat, 11 Aug 2012 23:16:51 GMT https://community.cisco.com/t5/network-access-control/ise-identity-group-question/m-p/1969436#M186079 Tarik Admani 2012-08-11T23:16:51Z ISE - Identity group question https://community.cisco.com/t5/network-access-control/ise-identity-group-question/m-p/1969437#M186086 <HTML><HEAD></HEAD><BODY><P>As always, thanks alot <SPAN __jive_emoticon_name="happy" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/4.5.4/images/emoticons/happy.gif"></SPAN></P></BODY></HTML> Sat, 11 Aug 2012 23:35:52 GMT https://community.cisco.com/t5/network-access-control/ise-identity-group-question/m-p/1969437#M186086 Jeppe Flensted 2012-08-11T23:35:52Z ISE - Identity group question https://community.cisco.com/t5/network-access-control/ise-identity-group-question/m-p/1969438#M186095 <HTML><HEAD></HEAD><BODY><TABLE border="1" cellpadding="2" cellspacing="0" rules="rows" style="border: 1px none #e7e7ff; font-size: small; width: 100%; border-collapse: collapse;"><TBODY><TR style="color: #4a3c8c; background-color: #e7e7ff;"><TD><P><STRONG>Kindly do the second level review:</STRONG></P><P></P><P style="margin-bottom: 12pt;"><A href="https://www.cisco.com/en/US/docs/solutions/Enterprise/Security/TrustSec_2.0/trustsec_2.0_dig.pdf">https://www.cisco.com/en/US/docs/solutions/Enterprise/Security/TrustSec_2.0/trustsec_2.0_dig.pdf </A><BR /> <BR /> </P></TD><TD><BR /></TD></TR></TBODY></TABLE></BODY></HTML> Tue, 21 May 2013 13:50:34 GMT https://community.cisco.com/t5/network-access-control/ise-identity-group-question/m-p/1969438#M186095 manjeets 2013-05-21T13:50:34Z