cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
202
Views
5
Helpful
1
Replies

Endpoint hitting correct rule in live Log, but shows up incorrectly in Conext

Josh Morris
Participant
Participant

I have been trying to properly profile devices and get them put into specific rules instead of the last rule. My last rule is called 'Closed_Mode'. I want the endpoint to hit the AuthZ rule 'Global..SJ_Computers'. it appears to hit the proper rule in the Live Log, but the endpoint in the context visibility page shows it hitting 'Closed_Mode' instead.

 

Capture1.PNGCapture2.PNG

1 Accepted Solution

Accepted Solutions

hslai
Cisco Employee
Cisco Employee

This usually happens when the endpoint hits one policy rule earlier and then changes to another. It might take sometime for the update to reflect on the context visibility.

View solution in original post

1 Reply 1

hslai
Cisco Employee
Cisco Employee

This usually happens when the endpoint hits one policy rule earlier and then changes to another. It might take sometime for the update to reflect on the context visibility.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers