[ISE] What is the best Authorization rules sequence ?

[vrz rrr]

Hello,

like a FW set of rules, I think that ISE's authZ rules should also be ordered with care ?

What are the best practices ?

Most used first ?

Guest, MAB and Webauth at the end ?

Tell me...

Any screencap is welcome

Regards.

[Tarik Admani]

Hi,

The first rule matched is the rule that applies. Best practices are outline by one of the tac engineers in this document.

https://supportforums.cisco.com/community/netpro/security/aaa?view=blog

You can set attributes such as network device groups to determine if the wired, wireless, or vpn policies need to be in effect (which I am sure you are aware of).

Thanks,

Tarik Admani
*Please rate helpful posts*