Custom AP Rules

In general, an AP that performs filtering should apply the same set of policy rules for a role as the controller. However, this is not mandatory. An AP can enforce a different set of rules than the controller. In general, avoid using Custom AP filters. Custom AP filters are provided primarily for backward compatibility. For example, they are useful when using policies that have more than 32 rules.

There are restrictions on a role that uses custom AP filtering, including the following: