topic ISE 2.4 Posturing DLP(Force Point) in Network Access Control

ISE 2.4 Posturing DLP(Force Point)

tebogo.pholo1 — Wed, 19 May 2021 14:49:35 GMT

Would appreciate if anyone can advise how to create a Posture Condition on ISE 2.4 for posturing check of Force Point/DLP?

is this possible?

Regards

Re: ISE 2.4 Posturing DLP(Force Point)

Mike.Cifelli — Wed, 19 May 2021 16:17:44 GMT

After a quick overview of the out-of-the-box posture conditions I do not specifically see Forcepoint product support so AFAIK there may be limited options. However, this does not mean you have no posture options available to you to force assessment against it. What is your end goal? To ensure it is installed and running? Or something more in depth, perhaps targeting a DLP version? Consider testing the following:

Service Condition: Ensure DLP is running

File Condition: Targeting executable via install dir path

Registry Condition: Any possible registry keys you could target that would meet your need

Re: ISE 2.4 Posturing DLP(Force Point)

tebogo.pholo1 — Wed, 19 May 2021 17:27:48 GMT

Hello Mike

Thanks

My ideal solution would've been doing posturing on DLP version however i will try your suggestion by just checking if the software is installed/running and see how that works out for me.