Cisco
Login
Search
Software Secure Firewall Threat Defense
Platform Secure Firewall Threat Defense Virtual
Activity Onboard

Last updated: Jul 29, 2025

Create a Dynamic Access Policy Record

A dynamic access policy (DAP) can contain multiple DAP records, where you configure user and endpoint attributes. You can prioritize the DAP records within a DAP so that the Firewall Threat Defense can select and sequence the required criteria when a user attempts VPN connection.

Procedure

1

Choose Devices > Dynamic Access Policy.
2

Edit an existing dynamic access policy or click Create Dynamic Access Policy to create a new one and then edit the policy.
3

Click Create DAP Record.
4

Click the General tab.
5

Specify the Name for the DAP record.
6

Enter the Priority for the DAP record.

The lower the number, the higher the priority.
7

Select one of the following actions to take when a DAP record matches:

  • Continue—Applies access policy attributes to the session. If any, the next DAP record (next policy line with less priority) is then evaluated.

  • Terminate—Terminates the session.

  • Quarantine—Quarantines the connection.
8

Check the Display User Message on Criterion Match check-box and add the user message.

The Firewall Threat Defense displays this message to the user when the DAP record matches.
9

Check the Apply a Network ACL on Traffic check box and select the access control list from the drop-down.
10

Check the Apply one or more Secure Client Custom Attributes check box and select the custom attributes object from the drop-down.
11

Click Save.