Rahul, Thank you for your answer. So, with the below scenario, it seems since the ASA process all DAP policies, then Rule 3 would break Rule 2...correct? Rule 1: user = ('BP*' or 'NON*' OR 'bp*' OR 'non*')   gets one training bookmark regardless of background flag. Basically, you just need a valid RSA token.   Rule 2: userAttr.backgroundcheck = 'no'  AND  userAttr.ou = 'buspartner'    stop rule userAttr.backgroundcheck = 'no'  AND  userAttr.ou = 'contractor'     stop rule userAttr.backgroundcheck = 'no'  AND  userAttr.ou = 'JV'                 stop rule   Rule 3: username is  "*"    Everyone gets directory service pages   Without a stop rule ability, would the Rule 3 break Rule 2 and give everyone the directory service pages? Or, would you be able to keep the integrity of Rule 2 and not allow these users access by giving the DAP policy higher priority? ... View more

This has had no response since posted in the beginning of October 2018. Would anyone be able to comment further on these? We just configured and tested another sslvpn solution with a different hardware vendor; however, it didn't meet all the parameters above. Any response would be helpful...if not, then I will start configuring and testing soon...now that the other hardware vendor test didn't pass for us. ... View more