topic Compound boolean condition in ISE? in Network Access Control

Compound boolean condition in ISE?

jilahbg — Wed, 13 Mar 2019 00:40:21 GMT

Hello

In ISE I have to define a complex condition as a requirement for an authorization policy. Like this:

(member of group X) AND ((wlan id 1) or (wlan id 2))

Can this be done? I can see that I can enter multiple conditions but there is only one AND/OR dropdown for the entire window which will give me either "x AND y AND z" or "x OR y OR z".

what am I missing?

Best regards

Jimmy Larsson

Sent from Cisco Technical Support iPad App

Compound boolean condition in ISE?

SCOTT VOLL — Thu, 15 Mar 2012 22:54:09 GMT

This is possible. it is done in the Policy --> Policy Elements --> Conditions. Create your boolean condition then go back to your policy and use it.

Scott

Compound boolean condition in ISE?

jilahbg — Fri, 16 Mar 2012 08:04:07 GMT

Hello

Sorry if I was unclear. I am fully aware of where to create a condition. However, I cannot see how to create a complex condition like the one I describes.

Can you clearify: If i go into Policy Elements - Condition and creates a new condition, what are the exact steps to create a condition like:

A = 1

and

(B = 2 OR C=3)

Thanks in advance

Regards

Jimmy

Compound boolean condition in ISE?

DENNIS BAAS — Fri, 16 Mar 2012 09:18:24 GMT

I ran into the same issue. I fixed this, but I hope someone has a better idea, as follows:

In Policy Elements > Conditions:

- create a Authorization compound condition A with Expression 1 OR Expression 2

- create a Authorization compound condition B with Expression 3 OR Expression 4

(I have not found a way to use a compound condition in another compound condition)

Create the Authorization Policy with Condition A AND Condition B.

Of course you can also do this the other way around.

Hope this helps.