Scenario 3: Tie-breaker scenario for FQDN-IP overlap within the same rule
Resource A -> defined with destination “acme.com”, which resolves to 10.10.10.10.
Resource B -> defined with destination “10.10.10.0/24”.
Access policy rules:
- UserGroupA has access to Resource A OR Resource B
Behavior:
- Like earlier scenarios, a request to “acme.com” would match to both resource A and B.
- But unlike earlier Scenarios, a request from a user in UserGroupA would match to rule #1 that has two valid destinations.
- In this case, because the original request was to FQDN (“acme.com”), Resource A is the most specific match to the access request, and so access will be provided to Resource A.