cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

716
Views
5
Helpful
3
Replies
ChrisMac70330
Beginner

Cisco ISE 2.2 Network Access

Hi guys,

 

I am trying to create a policy set rule for network access in which I would like to do 1 big OR in between and 2 AND but I could not find a way to do it.

 

 

Thanks,

Chris.

1 ACCEPTED SOLUTION

Accepted Solutions
Colby LeMaire
VIP Collaborator

You will have to create library conditions to be able to mix and match AND's and OR's.  So library condition to hold all of your OR's and then in your policy, just use AND to combine the conditions.  Hard to tell what you are wanting to do from your screenshot.

View solution in original post

3 REPLIES 3
Colby LeMaire
VIP Collaborator

You will have to create library conditions to be able to mix and match AND's and OR's.  So library condition to hold all of your OR's and then in your policy, just use AND to combine the conditions.  Hard to tell what you are wanting to do from your screenshot.

View solution in original post

Hi, trying to create a rule that will combine 2 AND's separated by an OR(AD group AND Network compound condition) OR (another AD group AND Network Compound)

If that makes sense.

There is no way to configure that kind of complex structure in the AuthZ policy in ISE 2.2, but you can create a more complex Compound Condition with various AND/OR statements using pre-configured Simple Conditions. You need to create your Simple Conditions first, then create a new Compound Condition, add one of your Simple Conditions, then switch to the Advanced View. From there, you can create all kinds of AND (&) OR (|) and NOT (!) combinations. The new Condition Studio in ISE 2.3+ is much more flexible in this way.

 

Screen Shot 2020-09-11 at 8.58.19 am.png

Content for Community-Ad