Filter
Top Products
10-44
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 10 Managing Access Policies
Configuring Compound Conditions
Related Topics
• Compound Condition Building Blocks, page 10-40
• Using the Compound Expression Builder, page 10-44
Using the Compound Expression Builder
You construct compound conditions by using the expression builder in Rule Properties pages. The
expression builder contains two sections: a predicate builder to create primary conditions and controls
for managing the expression.
In the first section, you define the primary conditions. Choose the dictionary and attribute to define the
operand, then choose the operator, and specify a value for the condition. Use the second section to
organize the order of conditions and the logical operators that operate on or between binary conditions.
Table 10-22 describes the fields in the compound expression builder.
Table 10-22 Expression Builder Fields
Field Description
Condition
Use this section to define the primary conditions.
Dictionary Specifies the dictionary from which to take the operand. These available options depend on the policy that
you are defining. For example, when you define a service selection policy, the Identity dictionaries are not
available.
Attribute Specifies the attribute that is the operand of the condition. The available attributes depend on the dictionary
that you chose.
Operator The relational operator content is dynamically determined according to the choice in the preceding operand
field.
Value The condition value. The type of this field depends on the type of condition or attribute. Select one of the
following two options:
• Static—If selected, you have to enter or select the static value depending on attribute type.
• Dynamic—If selected, you can select another dictionary attribute to compare against the dictionary
attribute selected as operand.
Current
Condition Set
Use this section to organize the order of conditions and the logical operators that operate on or between
binary conditions.
Condition list Displays a list of defined binary conditions for the compound conditions and their associated logical
operators.
Add After you define a binary condition, click Add to add it to the Condition list.
Edit To edit a binary condition, select the condition in the Condition list and click Edit. The condition properties
appear in the Condition fields. Modify the condition as required, then click Replace.
Replace Click to replace the selected condition with the condition currently defined in the Condition fields.
And
Or
Specifies the logical operator on a selected condition, or between the selected condition and the one above
it. Click the appropriate operator, and click Insert to add the operator as a separate line; click the operator
and click Replace, to replace the selected line.
Delete Click to delete the selected binary condition or operator from the condition list.
Preview Click to display the current expression in corresponding parenthesis representation. The rule table displays
the parenthesis representation after the compound expression is created.