Cisco ISE Default Rule Messed Up

[nomadicwifi]

Hi all,

After adding AuthZ policies one after another, the default rule policy gets messed up. See the image below. The default becomes a regular policy and the last policy in the list becomes a default rule like policy. The name cannot be changed and "if not matches" cannot be changed too. Looks like a bug to me.

Has anyone experienced this before and managed to fix it?           

Thanks in advanced for your replies and solutions.

Regards,

JS Chew

[thejman85 · Accepted solution]

You might have run into this:

http://www.cisco.com/en/US/ts/fn/636/fn63635.html

TAC can help you reorder the rules if that's the case.