topic Re: Sourcefire Identity Policy error in Network Security

Sourcefire Identity Policy error

eric.lovelace — Fri, 21 Feb 2020 14:21:14 GMT

I am getting the following errors in my identity policy - Is this error a warning that can be ignored? If not why can I not add multiple rules in my identity policy?

Re: Sourcefire Identity Policy error

Marvin Rhoads — Sun, 24 Sep 2017 10:15:40 GMT

Identity policy doesn't allow multiple rules with unique realms to be active.

Depending on how your realms are setup, there may be other ways to address a mutiple unique realms.

Re: Sourcefire Identity Policy error

eric.lovelace — Mon, 25 Sep 2017 13:10:18 GMT

Marvin - Thanks for your reply. How would you address multiple realms?

Re: Sourcefire Identity Policy error

Marvin Rhoads — Mon, 25 Sep 2017 14:38:34 GMT

Mostly it depends on your network and associated identity sources.

Two alternatives that may or may not work for you is separate access control policies - each with a unique realm or separate management domains. Either would require multiple firepower sensors though. There are also alternative ways to get identity - Firepower User Agent and ISE for example.