Users Guide

Field Description
Conditions/Enforcement
Profiles
Select conditions for this rule. For each condition, select a matching action
(Enforcement Profile).
NOTE: A condition in an Enforcement Policy rule can contain attributes from the
following namespaces: Tips:Role, Tips:Posture, and Date.
NOTE: The value field for the Tips:Role attribute can be a role defined in Policy
Manager, or a role fetched from the authorization source. (Refer to see how Enable as
Role can be turned on for a fetched attribute). Role names fetched from the
authorization source can be entered freeform in value field.
To commit the rule, click Save.
Enforcement Profiles If the rule conditions match, attributes from the selected enforcement profiles are sent
to Network Access Device. If a rule matches and there are multiple enforcement
profiles, the enforcement profile disambiguation rules apply. Refer to Configuring
Enforcement Profiles on page 264 for a list of the default profiles.
Table 182: Add Enforcement Policy (Rules Editor)
Dell Networking W-ClearPass Policy Manager 6.4 | User Guide Enforcement | 301