ISE - NDG by location

[eng.malak]

Dears

i created policy based on devices location and i have location groups as below

.

• Company-> Branch1

• Company-> Branch2

when i choose Branch1 or Branch2 as my location Attribute in authorization policy the policies work fine and get matched but when i use "Company" as a location the policy never get matched even if this the only policy exists and the default policy get matched  , so does this mean i can't use the parent group?

[Eduardo Aliaga · Accepted solution]

You can use the parent group, but you have to choose "CONTAIN" instead of "EQUALS". I have done that without issue.

Please rate if it's helpful.

[eng.malak]

thanks eduardoaliaga , in 1.1.4 "contains " doesn't exist but i used "starts with" and worked fine

[Eduardo Aliaga]

Yes you're right, It's "STARTS WITH", apologize for the confusion, but glad you got the right answer