Downloadable ACLs

Overview

DACLs are pushed from ISE to network devices during authorization.

Sample DACLs

PERMIT-ALL

permit ip any any

PERMIT-LIMITED

permit udp any any eq 53
permit tcp any any eq 443
permit tcp any any eq 80
deny ip any any

DENY-ALL

deny ip any any log

Creating DACLs

  1. Navigate to Policy > Results > Authorization > Downloadable ACLs

  2. Click Add

  3. Enter name and ACL content

  4. Save

Considerations

  • Syntax varies by NAD platform

  • Test on each platform type

  • Keep ACLs simple and readable

  • Use logging sparingly (performance)