I am trying to create an authorization condition to match any newly created endpoint. In other words, a condition to match a device the first time it is seen by ISE. I thought using dictionary attribute ENDPOINTPURGE:ElapsedDays equals zero might ...