Condition Library issue

[jasonb113083]

Deployed a clean install of ISE 2.3. I have several nodes deployed and haven't had any issues, until I started looking to build the policy sets. When I go under "Work Centers/Device Administration/Policy Elements/Condition library" there is a whole host of prebuilt conditions shown.

But when I go under "Work Centers/Device Administration/Device Admin Policy Sets" and try to create a new policy set, there are no conditions shown for me to select.

This same behavior happens when trying to build policies under the Network Access portions as well. Has anyone else run into this issue? Any ideas on how to fix this or if I am missing something obvious? I have a bug on a few discussions here, but it doesn't seem to be the same issue as I am seeing. I have a TAC case open, but I thought I would throw it out here in the mean time. Any help is appreciated.

[hslai]

For Device Admin (T+), it's normal to have no library conditions while configuring the T+ policy set conditions. Please, instead, use the editor on the right-hand side to pick from the attribute list.

For Network Access (RADIUS), that is not normal and there should be some built-in library conditions (e.g. Switch_Local_Web_Authentication) suitable as RADIUS policy set conditions.

Is this deployment upgraded to ISE 2.3? You would probably need to provide a copy of your CFG backup to TAC so TAC may try a recreate.

[jasonb113083 · Accepted solution]

I appreciate you trying to help, it appears that the only issue was not being used to the new user interface. Once I specified a protocol on the main condition page and saved, I was then able to click the "view" arrow to the right and that is where you are able to build out the actual policies. I've attached some screenshots in case anyone else does this same thing.