AD-AD1 ISE

[sujanyakj]

Do we have any dictionary named AD-AD1 in ISE with the attribute as ExternalGroups.

If not, please let me know how to create the custom condition in Cisco ISE release 2.4

[Charlie Moreton · Accepted solution]

The dictionary is created when you create your AD Join Point and is named the same as your Join Point.  To create your Condition, select the Dictionary with your AD Join Point name and choose the ExternalGroups attribute.

[Marvin Rhoads]

In addition to the issue at hand, please strongly consider moving to a supported version of ISE. 2.4 is long past end of sales and even past end of software maintenance now.

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/bulletin-c25-743964.html

[Marcelo Morais · Accepted solution]

Hi @sujanyakj ,

 1st at Administration > Identity Management > External Identity Sources, select Active Directory > select de <AD Name> > select the Groups tab > select Add, to add the AD Group.

 2nd at Work Centers > Network Access > Dictionaries > select the <AD Name> > click Dictionary Attributes, you are able to check the available attributes

 3rd at Policy > Policy Set, you are able to add Conditions with: <AD Name>.ExternalGroups Equals <select the AD Group that you add on 1st.>

Hope this helps !!!