How to use different endpoint in compount condition

[kai.onken]

Hello to all,

I've created severals endpoint groups, which are filled with MAC-Adressess. For example one group for printer, one for access points and so on.

I can remember that on ISE 2.0 I created MAB compound conditions for authorization like this:

• If MAC Address is member of endpoint "Printer" assign this smart port macro
• If MAC Address is member of endpoint "Access Point" assign that smart port macro
• an so on

Now I'm trying this with an ISE 2.3 and the only thing I can find is "is Endpoint". I've no idea to which point they moved it or if they have removed this kind of condition.

Kind regards

Kai

[Rob Ingram]

Hi,

I think you are looking for IdentityGroup Name

HTH

[kai.onken · Accepted solution]

Hello,

I don’t understand this anymore. I did just that several times in the last week and I had no success. This Morning I checked again and by a surprise, the groups are now available.

I don’t get it.

Many thanks

Kai