Create/Edit Rule Window

Use this window to add a new rule or edit an existing rule in a NAC configuration. End-systems that match the criteria selected for the rule are assigned the specified NAC profile.

To access this window:

  1. Click the NAC ManagerEdit NAC Configuration toolbar button to open the NAC Configuration window.
  2. In the left-panel tree, select the Rules icon. A table of rules for the NAC configuration displays in the right panel.
  3. Click the Add New Rule button in the table toolbar to open the Create Rule window.
    or
    Select a rule in the table and click the Edit Rule button in the toolbar to open the Edit Rule window.

The image below shows a rule created to provide a different NAC profile for authenticated registered users on mobile devices. Descriptions of the different fields and options in the window are provided below.

Click areas in the window for more information.

Name Authentication Method User Group End-System Group Location Selector Time Selector NAC Profile Rule Enabled Invert Create Rule Window

Name
Enter a name for a new rule or change the name of an existing rule, if desired.
  NOTES: For the following rule criteria:
-- If you select Any, then NAC Manager ignores the criteria during the rule match process.
-- If you select the Invert checkbox, NAC Manager considers the criteria a rule match if the end-system does not match the selected value.
Authentication Method
Select the authentication method that end-systems must match for this rule.
  NOTE: For the following rule criteria, use the drop-down menu to select a value, add a new value, or edit an existing value. You can also use the Advanced Configuration view to edit Rule Components (device type, end-system, user, location, and time groups) by selecting Tools > Management and Configuration > Advanced Configurations from the menu bar. In the left-panel tree, expand the Rule Components folder.
User Group
Select the user group that the end user must be a member of to match this rule.
End-System Group
Select the end-system group that the end-system must be a member of to match this rule.
Device Type Group
Select the device type group that the end-system must be a member of to match this rule.
Location Group
Select the network location (switch and interface) that the end-system must originate from to match this rule.
Time Group
Select a time frame that the connection request must match for this rule.
Zone
You only see this field if you have displayed the Zone column in the NAC Configuration Rules table. Select the end-system zone assigned to any end-system matching this rule. See End-System Zones for more information.
Profile
Select the NAC profile assigned to any end-system matching this rule.
Portal
Select the portal configuration presented to any end-system matching this rule.
Rule Enabled
Select this checkbox to enable this rule in the NAC configuration.

Related Information

For information on related windows:

Top