Practical Deployment of Cisco Identity Services Engine (ISE)

CHAPTER

199

14

ISE Posture Assessment

INTRODUCTION

The role of posture checking within ISE is to check one or more attributes on an endpoint

and use those checks to determine if a client is “t” to access the network. These attributes

can include:

• Antivirus/spyware installation/denition verication

• Windows updates

• If a service/application is running

• Files existing/dates checked

• Registry keys existing/containing specied values

These posture rules/conditions are extremely exible and with a little ingenuity you can

check almost anything about a computer and use the outcomes to make policy decisions.

POSTURE BASICS

The rst thing to know ...