Cisco 5520 - ASA IPS Edition Bundle Configuration Manual page 52

Configuring the Secure Desktop for Clients that Match Location Criteria
Figure 5-7
Click one of the following radio buttons:
Step 2
Use Failure Group-Policy if you want to apply the "Alternative group policy" to any remote client
•
matched to this location.
This option lets you apply an alternative to the default group policy so you can differentiate access
rights. Typically, you would use the failure group policy to apply access rights that are more limited
than those associated with the success group policy.
With this option set, CSDM dims the attributes in the Criteria area. If you click this radio button,
you cannot change other settings on this tab.
Cisco Secure Desktop Configuration Guide
5-14
VPN Group-based Policy under Windows Installations
Chapter 5 Setting Up CSD for Microsoft Windows Clients
OL-8607-02