Can Cisco ISE Check on Domain-Joined Computers

NasserMousa — Wed, 07 Jun 2023 12:36:56 GMT

We have many laptops that are un-compliant (missing drivers, OS, and software updates). We did our best to reach these end-users but still facing availability issues.

I have asked Network team to help me out to prevent entering any un-compliant laptop to internal network, but they said: "we know how to do this on non-joined laptops (BYOD); but for joined laptops!, we don't know whether we can do "Posture Assessment" for them or not!"

Can ISE help us in this case? if not, is there any product can help?

Thank you

Re: Can Cisco ISE Check on Domain-Joined Computers

Kasun Bandara — Wed, 07 Jun 2023 12:41:07 GMT

@NasserMousa hi, ISE have tons of features for this kind of requirements. you can use posture at any case (yes you need licenses). you can set posture rules to check software, OS, AV, registry, etc... also can run on any device joined to AD or not joined to AD. you just need correct rule at correct place.

topic Re: Can Cisco ISE Check on Domain-Joined Computers in Network Access Control

Can Cisco ISE Check on Domain-Joined Computers

Re: Can Cisco ISE Check on Domain-Joined Computers