cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
187
Views
0
Helpful
2
Replies

Cisco ISE Policy Set Identity

hs08
VIP
VIP

I have grup called 'GRP1-MAC' and contains company device mac address

hs08_0-1761015715855.png

in the policy set why i can't see any group?

hs08_1-1761015759457.png

 

1 Accepted Solution

Accepted Solutions

Arne Bier
VIP
VIP

Hi @hs08 

 

It looks like you were trying to perform some ISE Endpoint Identity Group operations in Authentication Policy. 

But you can't do that - Authentication is just telling ISE where to look for the identity.

Main thing is to tell Authentication to CONTINUE if User Not FOund.

You need to look in Authorization Profile

ArneBier_0-1761024692981.png

 

View solution in original post

2 Replies 2

Arne Bier
VIP
VIP

Hi @hs08 

 

It looks like you were trying to perform some ISE Endpoint Identity Group operations in Authentication Policy. 

But you can't do that - Authentication is just telling ISE where to look for the identity.

Main thing is to tell Authentication to CONTINUE if User Not FOund.

You need to look in Authorization Profile

ArneBier_0-1761024692981.png

 

hs08
VIP
VIP

hi @Arne Bier 

yes correct, previously i wrong menu to config the authorization rule. Thanks for correcting me.