topic Posture validation in Audit mode in Network Access Control

Posture validation in Audit mode

SzantaiNorbert — Fri, 24 Feb 2023 10:02:42 GMT

Dear Community,

Does anybody know how the audit posture conditions are evaluated? Based on my understanding the audit conditions should be used to determine if a condition is good to go before changing it to mandatory.

Right now we have 2 mandatory and a bunch of audit conditions, and the report looks like this:

And based on that we cannot be sure which condition is failing, which is OK, since all of the audit condition is failed, but the conditions are not even evaluated, they are skipped.

ISE version: 3.1P5

Regards,

Norbert

Re: Posture validation in Audit mode

Damien Miller — Sat, 25 Feb 2023 17:28:40 GMT

Is there a Mandatory condition that is failing but not showing?
"Posture checks are evaluated in the order of mandatory, optional, and audit. If a mandatory check fails, the related audit checks will not be carried out."

Re: Posture validation in Audit mode

SzantaiNorbert — Sat, 25 Feb 2023 18:39:11 GMT

Unfortunately not, this is the full posture report. We have only 2 condition in mandatory, I10 and I11.

Another report:

And in that you can see that the posture status of the client is compliant, which means that all of the mandatory conditions were passed, but the audit conditions are marked as failed but they are skipped again.