Hey all,
I am trying to finalize my ISE Checkpoint Radius connection for VPN Authentication. Only problem I have, in authorization process, I want ISE to send first Group of user (I am authenticating internally) to checkpoint as attr 25.
However ISE sends "User Identity Group:Group_Name" which checkpoint does not understand prefix. I need class 25 attribute as only Group_Name to be delivered to checkpoint. Can I twick ISE to do that by creating new attribute in dictionary maybe?
Thanks in advance!
PS:. I know I can create several Profiles with manually added Group names and create Policies based on OU but I want it to be one policy where first group name will be delivered automatically but without prefix.