Managing Cisco Secure Access IP pools

[Darkmatter]

It looks like once you created an IP pool and assigned it a region, the region cannot be changed anymore afterwards?

How would you go about that? At this moment, the only way around is deleting that specific IP pool al together and start over again with the new settings.

Secondly, say you want different IP pools for internal users and some vendors that require VPN access, is that even a best practice in Secure Access or this is being handled in another way?

[nbogdaje · Accepted solution]

You can change the region but you need to change the pool subnets as well. So you can change the region and put in a dummy ip pool subnet, save it, then go back and put your real subnets back in. So either that or just delete the pool and re-create it.

[Darkmatter]

It works this way and you can see it as a workaround, but it's far from convenient and the way you have to handle this can be improved.