Can we put endpoint having unknown posture status in blocking or Quarantine vlan.

IshwarBamane2910 — Wed, 07 Jul 2021 18:30:31 GMT

We have policy for unknown posture condition in which we had configured authorization profile without redirection and applied for unknown posture condition.

But after this changes we observed that unknown posture count goes on increasing day by day.

Does it Cisco best practices configuration ?

What are the reasons that endpoint showing unknown posture status ?

Can we put endpoint having unknown posture status in blocking or quarantine vlan ?

Re: Can we put endpoint having unknown posture status in blocking or Quarantine vlan.

Marcelo Morais — Thu, 08 Jul 2021 06:21:51 GMT

Hi @IshwarBamane2910 ,

please take a look at: ISE Posture Style Comparison for Pre and Post 2.2. search for Configure Authorization Profiles and Policies.

"...

VLAN Assignment - before successful posture user can be put in restricted VLAN, this approach should work fine for almost any NAD vendor

..."

Hope this helps !!!

topic Re: Can we put endpoint having unknown posture status in blocking or Quarantine vlan. in Network Access Control

Can we put endpoint having unknown posture status in blocking or Quarantine vlan.

Re: Can we put endpoint having unknown posture status in blocking or Quarantine vlan.