10-25
User Guide for Cisco Secure Access Control System 5.4
OL-26225-01
Chapter10 Managing Access Poli cies
Configuring Access Service Policies
•Creating Policy Rules, page 10-38
•Duplicating a Rule, page 10-39
•Editing Policy Rules, page10-39
•Deleting Policy Rules, page10-40
For information about configuring an identity policy for Host Lookup requests, see Configuring an
Authorization Policy for Host Lookup Requests, page 4-20.
Related Topics
•Configuring a Group Mapping Policy, page 10-27
•Configuring a Session Authorization Policy for Network Access, page 10-30
•Configuring a Session Authorization Policy for Network Access, page 10-30
•Configuring Shell/Command Authorization Policies for Device Administration, page10-35
Configuring Identity Policy Rule Properties
You can create, duplicate, or edit an identity policy rule to determine the identity databases that are used
to authenticate the client and retrieve attributes for the client.
To display this page:
Step1 Choose Access Policies > Access Services > service > Identity, then do one of the following:
•Click Create.
•Check a rule check box, and click Duplicate.
•Click a rule name or check a rule check box, then click Edit.
Step2 Complete the fields as shown in the Identity Rule Properties page described in Table10-11: