cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
298
Views
4
Helpful
3
Replies

Regex in Authorization Policy (Solved)

Htonieto
Level 1
Level 1

Hello everyone.

 
I'm trying to make a Regex to match some specific hostnames in one authorization policy, but not managed to do it sucessfully.
 
Here are the conditions, tried witch Matches or Starts With, but no success.
Htonieto_0-1732799869011.png

Also validated the REGEX with PCRE2 and Java 8 and it's matching properly:

Htonieto_1-1732800022667.png
 
If I remove the Regex and use only Starts With LT-1 it works, but then I will need lots of OR conditions and I'm trying to avoid it.
Htonieto_2-1732800218538.png

 

Version:
3.1.0.518
Patch Information:
5,8
1 Accepted Solution

Accepted Solutions

Htonieto
Level 1
Level 1

@MHM Cisco World , @JPavonM

Thank you very much for your responses.

I believe the issue was related to the ISE's internal endpoint database. After deleting the endpoint from the database and waiting two hours, it worked with the previous configuration.

For testing, three rules were created, and the first one was hit:

Htonieto_1-1732809757412.png

Result:

 

Htonieto_3-1732809921199.png

Regex Used: Matches

^LT-1[JKL].*

 

View solution in original post

3 Replies 3

try add  $ in end 

MHM

JPavonM
VIP
VIP

can you put some examples of hostnames to see where the error may be?

Htonieto
Level 1
Level 1

@MHM Cisco World , @JPavonM

Thank you very much for your responses.

I believe the issue was related to the ISE's internal endpoint database. After deleting the endpoint from the database and waiting two hours, it worked with the previous configuration.

For testing, three rules were created, and the first one was hit:

Htonieto_1-1732809757412.png

Result:

 

Htonieto_3-1732809921199.png

Regex Used: Matches

^LT-1[JKL].*