https://community.cisco.com/t5/network-access-control/trustsec-sgacl/m-p/4195978#M564249 <P>I am creating rules (SGACL) for a trustsec matrix.</P><P>I found a variation on how to permit and deny service ports.</P><P>Please tell me if there is a way to deny and permit ip addresses of hosts?</P> Wed, 09 Dec 2020 15:18:01 GMT Vadim Starovoytov 2020-12-09T15:18:01Z https://community.cisco.com/t5/network-access-control/trustsec-sgacl/m-p/4195978#M564249 <P>I am creating rules (SGACL) for a trustsec matrix.</P><P>I found a variation on how to permit and deny service ports.</P><P>Please tell me if there is a way to deny and permit ip addresses of hosts?</P> Wed, 09 Dec 2020 15:18:01 GMT https://community.cisco.com/t5/network-access-control/trustsec-sgacl/m-p/4195978#M564249 Vadim Starovoytov 2020-12-09T15:18:01Z https://community.cisco.com/t5/network-access-control/trustsec-sgacl/m-p/4196066#M564252 <P>SGACLs are IP agnostic other than the extent where they can apply to all, or selectively to ipv4/ipv6 traffic. You cannot directly place an IP address within an SGACL, it is strictly SGT to SGT enforcement.&nbsp;<BR /><BR /></P> <P>&nbsp;</P> Wed, 09 Dec 2020 16:57:12 GMT https://community.cisco.com/t5/network-access-control/trustsec-sgacl/m-p/4196066#M564252 Damien Miller 2020-12-09T16:57:12Z