Security group tags

A security group tag is a network security object that

• specifies a single SGT value,

• is used in rules to control traffic with SGT attributes not assigned by Cisco ISE, and

• cannot be grouped or overridden.