Policy Conditions

Condition Types

  • Simple - Single attribute check

  • Compound - Multiple conditions combined

Common Attributes

Network Access

  • EapAuthentication - EAP method used

  • EapTunnel - Tunnel method (TEAP, PEAP)

  • EapChainingResult - Machine/user auth result

RADIUS

  • NAS-Port-Type - Wired, Wireless, Virtual

  • Calling-Station-ID - Client MAC

  • NAS-IP-Address - NAD IP

Identity

  • AD:ExternalGroups - AD group membership

  • IdentityGroup - ISE identity group

See Compound Conditions for combining.