Creating access control policy only with Access Role

[Gary_Torrico1]

Hello guys,

I have a client that needs to perform all the Access Control, App Control and URL Filtering only with Access Role.

I need to know your experience about the limitations of doing all the police with Access Role. Especially for Source of the rule.

Thank you.

[Marco_Valenti]

there are no such kind of limitation in this configuration , the only one I can see is that you need to properly define identity awareness blade for getting identity from ad query for making it work as expected

[Dor_Marcovitch]

you should also take care of traffic the is "not yet identified" meaning access by the computer to the domain controller will not yet be identified on the gateway as a source Machine / User until it will finish it's authentication with the domain controller