| Description | string | An IP endpoint may have multiple identities for use in different situations. The IdentityContext property specifies the specific context/identities which pertain to this Rule. The property's function is similar to that of PolicyRoles. A context may be a VPN name or other identifier that selects the appropriate identity.
IdentityContext is an array of strings. The multiple values in the array are logically ORed together in matching an IPNetworkIdentity's IdentityContext. Each value in the array may be a composition of multiple context names. When an array value is a composition, the individual values are logically ANDed together for evaluation purposes. The syntax is:
<ContextName>[&&<ContextName>]*
where the individual context names appear in alphabetical order (according to the collating sequence for UCS-2). So, for example, the values 'CompanyXVPN', 'CompanyYVPN&&TopSecret', 'CompanyZVPN&&Confidential' are possible contexts for a Rule. They are matched against an IPNetworkIdentity's IdentityContext. Any of the values may indicate a match and select an Identity, since the values in the array are logically ORed. |