Cisco ISE2.0 - Policy Sets

[agapitca19]

Hi,

How do you disable the "Default" Policy Set under Work Centers-Device Administration-Device Admin Policy Sets? I have put in a new Policy Set above the "Default" and the switch that I am using for testing works with AAA but when I checked the TACACS Livelog, the Authentication and Authorization Policy show that they used the "Default" Policy Set instead of the new one.

Thanks. 

[jan.nielsen]

Normally policy sets are evaluated by the conditions you set in them, and not the order that they configured in. Did you set a condition in your new policy set that you would expect to match it ?

[agapitca19]

I revised my device admin policy sets to be more granular and it is working now. 

[jan.nielsen]

Great! - Please rate my answer if you felt it helped you to solve your problem

[nspasov]

To add to what Jan said (+5 from me). You should also make sure that both the Authentication and the Authorization Policies in the default set are set to "deny access." Otherwise, you could potentially grant access to your network/device unwillingly. 

Thank you for rating helpful posts!