Applying both SGACL and dACL to a device

[Dolevha]

Hey,
I was wondering if it's possible to apply both SGACL and dACL to the same device through ISE.

Thanks!

[thomas · Accepted solution]

You may apply a VLAN, dACL, and SGT - and more! - in an ISE Authorization Profile for a session.

SGACLs are not applied via an Authorization Profile like the others.

SGACLs are managed using the TrustSec Matrix in ISE and applied to TrustSec/SDA enabled network devices for enforcement based on source SGTs to destination SGTs.