topic Re: Regex in Authorization Policy in Network Access Control

Regex in Authorization Policy (Solved)

Htonieto — Thu, 28 Nov 2024 16:10:20 GMT

Hello everyone.

I'm trying to make a Regex to match some specific hostnames in one authorization policy, but not managed to do it sucessfully.

Here are the conditions, tried witch Matches or Starts With, but no success.

Also validated the REGEX with PCRE2 and Java 8 and it's matching properly:

If I remove the Regex and use only Starts With LT-1 it works, but then I will need lots of OR conditions and I'm trying to avoid it.

Version:

3.1.0.518

Patch Information:

5,8

Re: Regex in Authorization Policy

MHM Cisco World — Thu, 28 Nov 2024 13:41:49 GMT

try add $ in end

MHM

Re: Regex in Authorization Policy

JPavonM — Thu, 28 Nov 2024 14:06:56 GMT

can you put some examples of hostnames to see where the error may be?

Re: Regex in Authorization Policy

Htonieto — Thu, 28 Nov 2024 16:09:32 GMT

@MHM Cisco World , @JPavonM

Thank you very much for your responses.

I believe the issue was related to the ISE's internal endpoint database. After deleting the endpoint from the database and waiting two hours, it worked with the previous configuration.

For testing, three rules were created, and the first one was hit:

Result:

Regex Used: Matches

^LT-1[JKL].*