https://community.cisco.com/t5/network-access-control/cisco-anyconnect-nam-profile-user-certificate-matching-rule/m-p/3901441#M547791 <LI-SPOILER>Hi, I am having issues with configuring the Use Certificate Matching Rule option for User certificates.&nbsp;<BR />I've checked the checkbox&nbsp;<BR />Picked the Certificate Field Subject.OU&nbsp;<BR />Match Option: Includes<BR />Value: Copied the value from the certificate and pasted into the field.<BR />Save the profile as configuration.xml and moved into the folder ProgramData/Cisco/Cisco AnyConnect Secure Mobility Client/Network Access Management/newConfigFiles<BR />and restarted AnyConnect<BR />The file disappears from the folder&nbsp;<BR />but the matching rule doesn't work<BR />Any idea, is there a certain way in need to add the Value string in case there are spaces in the string ?<BR />thanks<BR />Alex</LI-SPOILER><P>&nbsp;</P> Fri, 21 Feb 2020 19:08:24 GMT alex.dersch 2020-02-21T19:08:24Z https://community.cisco.com/t5/network-access-control/cisco-anyconnect-nam-profile-user-certificate-matching-rule/m-p/3901441#M547791 <LI-SPOILER>Hi, I am having issues with configuring the Use Certificate Matching Rule option for User certificates.&nbsp;<BR />I've checked the checkbox&nbsp;<BR />Picked the Certificate Field Subject.OU&nbsp;<BR />Match Option: Includes<BR />Value: Copied the value from the certificate and pasted into the field.<BR />Save the profile as configuration.xml and moved into the folder ProgramData/Cisco/Cisco AnyConnect Secure Mobility Client/Network Access Management/newConfigFiles<BR />and restarted AnyConnect<BR />The file disappears from the folder&nbsp;<BR />but the matching rule doesn't work<BR />Any idea, is there a certain way in need to add the Value string in case there are spaces in the string ?<BR />thanks<BR />Alex</LI-SPOILER><P>&nbsp;</P> Fri, 21 Feb 2020 19:08:24 GMT https://community.cisco.com/t5/network-access-control/cisco-anyconnect-nam-profile-user-certificate-matching-rule/m-p/3901441#M547791 alex.dersch 2020-02-21T19:08:24Z https://community.cisco.com/t5/network-access-control/cisco-anyconnect-nam-profile-user-certificate-matching-rule/m-p/3901493#M547792 Put it here:<BR />C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Network Access Manager\system<BR />And overwrite configuration.xml<BR />Cheers! Thu, 01 Aug 2019 14:17:09 GMT https://community.cisco.com/t5/network-access-control/cisco-anyconnect-nam-profile-user-certificate-matching-rule/m-p/3901493#M547792 Mike.Cifelli 2019-08-01T14:17:09Z