Security

last person joined: 3 hours ago 

Enterprise security using ClearPass Policy Management, ClearPass Security Exchange, IntroSpect, VIA, 360 Security Exchange, Extensions and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

CPPM - how do I know which condition has been matched

  • 1.  CPPM - how do I know which condition has been matched

    Posted Aug 15, 2018 07:32 PM

     

    Hi,

     

    quick question: is there a way to check which condition was matched in a particular enforcement policy in access tracker or any other logs?

     

    At the moment if I have an enforcement policy with several conditions, the access tracker just tells me whether one of condition was matched, but it doesn't tell me which one exaclty.

     

    Thanks

     



  • 2.  RE: CPPM - how do I know which condition has been matched

    Posted Aug 15, 2018 07:38 PM
    No. You'd need to look at what's in access tracker and match it.


  • 3.  RE: CPPM - how do I know which condition has been matched

    Posted Aug 16, 2018 03:40 AM

    What I prefer to do is to use role-mapping extensively and in the enforcement policy map on those roles. The mapped roles are shown in the Access Tracker and make it from there trivial to see which enforcement policy was selected.