cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

180
Views
5
Helpful
1
Replies
Highlighted
Beginner

Ise dacl and vpn filter

Hello ,

In a scenario that ASA has it's vpn-filter-list and after the posturing check a DACL is also assigned.

Both lists works or the DACL overrides asa-vpn-filter ?

 

Spyros

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
VIP Advisor

Re: Ise dacl and vpn filter

Hi,

A DACL and VPN Filter are a different method to achieve the same thing, if both applied they’d conflict. There is no information that I am a aware of that states which if any take precedence, normally you’d be expected to use one or the other.

 

Personally I’d use DACL and apply dynamically via ISE.

 

HTH

View solution in original post

1 REPLY 1
Highlighted
VIP Advisor

Re: Ise dacl and vpn filter

Hi,

A DACL and VPN Filter are a different method to achieve the same thing, if both applied they’d conflict. There is no information that I am a aware of that states which if any take precedence, normally you’d be expected to use one or the other.

 

Personally I’d use DACL and apply dynamically via ISE.

 

HTH

View solution in original post