Sourcefire Identity Policy error

[eric.lovelace]

I am getting the following errors in my identity policy - Is this error a warning that can be ignored? If not why can I not add multiple rules in my identity policy?

[Marvin Rhoads]

Identity policy doesn't allow multiple rules with unique realms to be active.

Depending on how your realms are setup, there may be other ways to address a mutiple unique realms.

[eric.lovelace]

Marvin - Thanks for your reply. How would you address multiple realms?

[Marvin Rhoads]

Mostly it depends on your network and associated identity sources.

Two alternatives that may or may not work for you is separate access control policies - each with a unique realm or separate management domains. Either would require multiple firepower sensors though. There are also alternative ways to get identity - Firepower User Agent and ISE for example.