Group Expression List

Group Expressions provide more flexibility when specifying users in a policy. When you enable authentication in a policy, you must also specify which users qualify for authentication. You can specify single users, user groups and, with Group Expressions, you can specify multiple groups or partial groups and you can exclude users and user groups.

The Group Expression List

This table lists all the group expressions configured on the NetScreen device and contains the following information for each:

ID: Indicates the identification number that are assigned to the group expression when it was created.

Group Expr: Indicates the name of the group expression.

User/Group/Expr1: Indicates the first part of the expression. This could be a single user, a user group, or another group expression.

Operator: Indicates which operator is used to formulate the group expression. The operators are AND, OR,  and NOT.

User/Group/Expr2: Indicates the second part of the expression. This could be a single user, a user group, or another group expression.

Configure: Click Edit to modify the group expression or click Remove to delete it.

To Create a Group Expression