Skip to main content
sims
sims
Explorer II
July 16, 2020
Solved

active and passive auth policy

  • July 16, 2020
  • 1 reply
  • 2460 views

 

Why "all and guest group" in the source , What if we give "guest group  " only 

Thanks

    Best answer by lobstercreed

    Completely different objects.  "all" is an address object, Guest-group is a user object, and they use AND logic.  If source is <address> AND user is <user/group>, then match this.  Without a source address object there would be no traffic to match.  You of course don't have to use "all" but you must use some address object that catches the traffic you're after.

    1 reply

    lobstercreed
    lobstercreedAnswer
    New Member
    July 16, 2020

    Completely different objects.  "all" is an address object, Guest-group is a user object, and they use AND logic.  If source is <address> AND user is <user/group>, then match this.  Without a source address object there would be no traffic to match.  You of course don't have to use "all" but you must use some address object that catches the traffic you're after.

    Terms & ConditionsAccessibility statement