User Guide for Cisco Secure Access Control Server - Stewing Home

Network Access Profiles Pages Reference
Authorization Rules for profile_name
14-50
User Guide for Cisco Secure Access Control Server 4.2
Chapter 14 Network Access Profiles
Use this page to list the set of authorization rules for a Network Access Profile.
To display this page, click Authorization in the Network Access Profiles Page, page 14-39.
Table 14-27 Authorization Rules for profile_name
Field Description
Condition
User Group The ACS group to which the user was mapped. This field defines the group of users for this rule. If you are
not basing authorization rules on authentication, select Any.
System
Posture Token
Action
The posture token that was returned as a result of posture validation. ACS checks the token status before
proceeding to follow the configured actions. You can use posture tokens to validate user groups. If you are
not using posture validation, select Any.
Deny Access Denies access for requests that do not match any configured policy.
Shared RAC The list of RACs defined in the Shared Profile Components > RADIUS Authorization Components option.
Note If you configure an external posture validation audit server to use session-timeout settings in the
Authorization policy, you must select a shared RAC. See Configuring Policies, page 13-15 and
External Posture Validation Audit Setup Pages, page 13-36.
Downloadable The list of downloadable ACLs defined in Shared Profile Components > Downloadable IP ACLs.
ACL
If a condition A default action when a matched condition is not found.
is not defined
or there is no
matched
condition:
Include
RADIUS
attributes from
user's group
Include
RADIUS
attributes from
user record
Enable to use RADIUS attributes per user’s group.
Enable to use RADIUS attributes per user record.
Related Topics
Configuring an Authorization Rule, page 14-36
Configuring a Default Authorization Rule, page 14-37
OL-14386-02