topic Posture Policy for Wired & Wireless endpoints in Network Access Control

Posture Policy for Wired & Wireless endpoints

henokk60 — Wed, 09 Jul 2025 11:43:16 GMT

Hi All,

I would like to know if it’s possible to create different posture policies for wired and wireless endpoints. For example, since wireless users typically use laptops and are roaming clients, the Cisco Umbrella service must be checked. However, wired clients are desktops, so the posture policy doesn’t need to check for that service.

Therefore, I’m looking to define separate posture policies for each type of endpoint. Is this possible? I would appreciate your assistance on this.

Thanks,

Re: Posture Policy for Wired & Wireless endpoints

Rob Ingram — Wed, 09 Jul 2025 12:25:25 GMT

@henokk60 you could try grouping the laptops and workstations into different AD groups, then edit the posture rule and under other conditions specify the AD group you wish match against.

Re: Posture Policy for Wired & Wireless endpoints

MHM Cisco World — Wed, 09 Jul 2025 15:10:15 GMT

From posture profile

Use condition then select

NAS-port-Type

The NAD will send to ISE if the link is ethernet or wireless

Also you can match NAD where wireless come from AP/WLC and ethernet from SW

MHM