Compound Conditions

Logical Operators

  • AND - All conditions must be true

  • OR - Any condition must be true

  • NOT - Negation

Examples

Managed EAP-TLS Device

Network Access:EapAuthentication EQUALS EAP-TLS
AND AD:ExternalGroups CONTAINS "Domain Computers"

BYOD or Guest

IdentityGroup EQUALS "BYOD"
OR IdentityGroup EQUALS "Guest"

Not a Printer

NOT EndpointProfile EQUALS "Printer"

Creating Compound Conditions

  1. Navigate to Policy > Policy Elements > Conditions > Compound Conditions

  2. Click Add

  3. Build condition tree with operators

  4. Save and reference in policies