[IAG] An Internet access policy is added to a user, but online users cannot see that the user is associated with the policy.
Problem Description
In the organizational structure, you can see that the user sangfor is associated with the BBC-test policy. However, when you click on the user in the online user list, you find that the user sangfor is not associated with this policy, as shown in the following figure.
342615b54a93245df3.png (194.71 KB)
894225b54a94acb400.png (55.44 KB)
Process——
- Check the Internet access permission policy and find that this policy is associated with all users, but this user is excluded in the exclusion list, as shown in the following figure.
14145b54ac5179e1d.png (197.99 KB)
Root cause
Although this BBC-test policy is associated with all users, it is excluded in the Internet access policy. As a result, although the association relationship can be seen in the organizational structure, because it is excluded, the actual policy is not associated, which is the result viewed by online users.
solution
Just remove the sangfor user from the exclusion list.
Original Link
https://support.sangfor.com.cn/cases/list?product_id=22&type=1&category_id=6066&isOpen=true