topic Re: Posture remediation timer in Network Access Control

Posture remediation timer

Madura Malwatte — Sat, 19 Jan 2019 14:24:46 GMT

ISE 2.3 patch 5

Is there a way where I can have remediation timer set to different values for different posture checks? For example can I have remediation timer set to 5 minutes for checking if any AM software is installed and a value of 180 minutes for definition file remediation?

Also can I have a user who doesn't remediate AV/AM definition file update initially move to compliant state with "Audit" setting and then move to non-compliant state if they do not remediate after a certain time?

Re: Posture remediation timer

MajidShirzadeh — Sat, 19 Jan 2019 19:26:37 GMT

Yes, under Work Center > Client Processioning > Resource > Posture Agent Profiles Settings where you configure your Agent Behavior there is an option for Remediation timer.

Re: Posture remediation timer

Madura Malwatte — Sat, 19 Jan 2019 22:42:57 GMT

Isn't the remediation timer under Posture > Settings > Posture General Settings? I'm already aware where it is. My question is about whether different timer values can be set for different posture requirements instead of a global value.

Re: Posture remediation timer

Jason Kunst — Sat, 19 Jan 2019 22:45:31 GMT

Pretty sure the answer is no you can’t have separate timers. 1 timer per posture policy. I also reached out to the experts on this to confirm

Re: Posture remediation timer

Nidhi — Sun, 20 Jan 2019 16:31:51 GMT

Jason is right! this is a global setting and it cannot be different for different posture policy.

Thanks,

Nidhi

Re: Posture remediation timer

Madura Malwatte — Sun, 20 Jan 2019 22:49:36 GMT

Thanks Jason, Nidhi for the confirmation.