I am attempting to use profiling for SDA printer identification. Basically I have a global policy (SDA_Printer) that uses IP startswith XX.XX.XX. I have created an profiled endpoint group based on this.
Then I am planning to create several child policies. For example, one I am testing out is SDA_HP_Printer:
MAC OUI Equals Hewlett Packard
My SDA HP printers are being profiled as SDA_HP_Printer as expected which means it hit on the parent & child profile condition checks. I would like to roll the MACs from all the children profile hits into the high level parent policy endpoint group so I can then use the top level in authz policy conditions. This is not working as I thought it would. Please advise.
