Authorization Policy Missing or Different in V2.4 | WorkCenter>TrustSec>Policy>Authorization

[techmgr.aballesteros1]

Hello Everyone,

I am trying to follow Wireless TrustSec Deployment Guide  https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-4/b_wireless_trustsec_deployment_guide.html , but I am stuck trying to figure out how to follow the guide. I am in Item#6 ( " Policy > Authorization we have configured Authorization rules for employee and contractor to pass the tags once the clients get authenticated. ")

I have already Policy Set for our Corporate, BYOD and Guest WIFI. I am just confused where to create AUTHZ for TrustSec. 

Do I have to create it above or below the existing Policy Set I already have for Corporate, BYOD and Guest WIF? Or Am I in the wrong page/tab? See above Screenshot. 

And if So, also confused how or where to put the conditions and rules. Like there are AuthC Policy, AuthZ Local, AuthZ Global, and AuthZ. If there's like a good sample screenshot I can follow , it'll tremendously help.

Thanks in Advance!

-Adrian

[paul]

You either add the SGT tags to your existing rules or add new rules in the same policy set to apply tags to.  You can apply SGT tags anytime you want even before you have TrustSec deployed.  If nothing is there to use the tags then they are ignored.

[Francesco Molino · Accepted solution]

Hi

You can use your existing policy-sets and go into authorization policy.
On your authorization rule, you will see at the right, a SGT field where you can
attach your config.
The section authorization local exception is replacing the exception section you had on your old ise.
The global exception will allow you to do an action and copy this same rule across all your policy-sets.