Updated Date: 07/07/2026
Adding a blank access policy item to an access policy
Before you start this task, configure an access profile.
Configure a blank item to configure one of several actions that has no explicit configuration defined.
-
On the Main tab, click Access > Profiles / Policies.
The Access Profiles (Per-Session Policies) screen opens.
-
In the Per-Session Policy column, click the Edit link for the access profile you want to configure.
The visual policy editor opens the access policy in a separate screen.
-
Click the (+) icon anywhere in the access policy to add a new item.
Note: Only an applicable subset of access policy items is available for selection in the visual policy editor for any access profile type.
A popup screen opens, listing predefined actions on tabs such as General Purpose, Authentication, and so on.
-
Select a blank action:
|
Endpoint Security (Client-Side) > Machine Info |
Collects machine info, and checks it against established values. |
|
General Purpose > Empty |
An empty action that you can configure with any allowed checks. |
A properties screen opens.
-
Click the Branch Rules tab.
The Branch Rules screen opens.
-
Click the Add Branch Rule button.
New Name and Expression settings display.
-
Click the change link in the Expression area.
A popup screen opens.
-
Click Add Expression.
New properties display.
-
For each expression you add, select an agent from the Agent Sel. list, a condition from the Condition list, and configure any details.
See the reference information for each action for more details.
-
Click Add Expression to add the expression to the list.
-
Add more expressions to the check as required. You can add expressions as either AND or OR conditions.
-
Click Finished.
The popup screen closes.
-
Click Save.
The properties screen closes and the policy displays.
The access policy is configured with the empty action you have configured.
Click the Apply Access Policy link to apply and activate your changes to this access policy.
Note: To ensure that logging is configured to meet your requirements, verify the log settings for the access profile.