Understanding which policy will or will not get applied can be confusing, as the policy engine considers many different data points. Lens includes a Test mapping tool that makes understanding this easy and allows administrators to tune policies with ease.
-
Login to the Lens Portal as an administrator
-
In the sidebar, navigate to the
Workstationsitem, and then selectConfiguration -
Navigate to the
Policiestab group, and select theTest mappingoption -
Set any (or none) of the
Test setupdropdown menus to test which policy will be applied:-
User- The connecting user -
Pool- The pool the user is connecting to -
Workstation- The workstation the user is connecting to
-
Test mapping results
-
Click the
Testbutton -
You can click on each policy to show more details about why it did or did not match, and show which ruleset and rule was responsible for this.