Visual Policy Designer Reference: Rules

A basic Access policy contains a start point, any client checks and authentication checks, assignment checks, and policy endings. These elements in the configuration are called Rules. Rules represent a set of configuration objects that define the behavior of a policy. It is these small actions, or rules, that serve a specific purpose or perform a specific operation on BIG-IP Next Access. Access policy rules must be configured individually in an Access policy. The outcome of evaluating a branch rule grants or denies access or continues to the following rule in the policy. The order of rules in an Access policy determines the flow of action.

All supported rules for BIG-IP Next Access are organized into the following categories:

• Assignment rules

• Authentication rules

• Federation rules

• General Purpose rules

• Interrogation rules

• Logon rules

• Single Sign-On rules