Cisco ISE Command sets matching lines with specific word

[Arne Vellinga]

Hi, i want to filter out all commands containing "MGMT" on my ASA.

But it doesn't work for me, it looks like my regex argument isn't being activated.

The command portion seems to work if i test with fixed arguments.

I use the following statement:

Grant	Command	Arguments
DENY_ALWAYS	*	.*MGMT.*

[Arne Bier]

Hello

ISE uses different logic when processing the TACACS commands and the arguments. 

https://communities.cisco.com/thread/86989  

commands use wildcards: e.g. sh*    or  sh??

arguments use regex: e.g. ^Interf.*[12345]