topic Posture - 802.1x Wired - Windows 11 in Network Access Control

Posture - 802.1x Wired - Windows 11

matt.w — Mon, 29 May 2023 22:56:59 GMT

Howdy Guys,

been doing some troubleshooting, and it turns out that Windows 11, in the registry, still actually reports itself as Windows 10 Enterprise, just with a difference Version Number.

So we currently have Posture policy which is set for Win 10 only, but it is being applied to Windows 11 devices and causing issues, as the Firewall check fails and a couple of other requirements.

Is there a way that we can check somewhere, the registry attribute for Windows build version number to ensure that Win 11 does NOT get the posture settings applied? if that makes sense?

Profiling is good, they get set there correctly, but when being postured they are falling into the Win 10 (all) OS selection

We are running ISE 3.0 Patch 6

Re: Posture - 802.1x Wired - Windows 11

Greg Gibbs — Tue, 30 May 2023 02:46:13 GMT

If the Win11 PCs are correctly being profiled as Windows11-Workstation, you might try the following.

1. Navigate to Policy > Profiling > Logical Profiles and create a new Logical Profile that matches on the Windows11-Workstation policy (e.g. 'Windows11 Devices')

2. In your Posture policy rule, select the Other Conditions drop-down and select Create New Condition. Define the condition as 'Endpoints:LogicalProfile NOT_EQUALS Windows11 Devices'

This should prevent your profiled Win11 PCs from hitting the rule.

Re: Posture - 802.1x Wired - Windows 11

mohamed orabi — Tue, 22 Aug 2023 09:12:26 GMT

Dear Greg Gibbs

I have same issue but I didn't find the Windows 11 policy to match it with the logical profile do you have any advice?

Re: Posture - 802.1x Wired - Windows 11

Greg Gibbs — Wed, 23 Aug 2023 00:15:45 GMT

@mohamed orabi , you should ensure you have a current profiler feed update from the Feed Service