topic Re: Mac OS cannot posture check on Temporal Agent in Network Access Control

Mac OS cannot posture check on Temporal Agent

jewfcb001 — Thu, 11 Jun 2026 10:01:27 GMT

Hi All ,
We try to configure Cisco ISE for check posture . I can configure Posture check to windows . It's working fine .But

macOS cannot posture check .

Please advise me .

Re: Mac OS cannot posture check on Temporal Agent

Rob Ingram — Thu, 11 Jun 2026 10:07:03 GMT

@jewfcb001 temporal agent is supported on MacOS, but there are limitations compared to windows, see below.

What is configured? What are the symptoms?

Re: Mac OS cannot posture check on Temporal Agent

jewfcb001 — Thu, 11 Jun 2026 12:11:31 GMT

@Rob Ingram
Thank you for information .
I configure posture for check anti-malware / firewall check / mac os version . policy same windows but windows can process posture check but macOS not check for condition.

Re: Mac OS cannot posture check on Temporal Agent

Rob Ingram — Thu, 11 Jun 2026 12:23:17 GMT

@jewfcb001 please provide screenshots of what you have configured.

Re: Mac OS cannot posture check on Temporal Agent

jewfcb001 — Thu, 11 Jun 2026 12:51:32 GMT

@Rob Ingram

Please see screenshot below . If not .Please tell me for menu.

Re: Mac OS cannot posture check on Temporal Agent

jewfcb001 — Fri, 12 Jun 2026 06:40:10 GMT

@Rob Ingram
cannot redirect page .

Re: Mac OS cannot posture check on Temporal Agent

Rob Ingram — Fri, 12 Jun 2026 06:47:59 GMT

@jewfcb001 can the endpoint device resolve the ISE hostname? If it cannot it won't display the ISE portal page.

Is this Wired, Wireless or VPN? Are you applying a DACL that is blocking communication to ISE?

Re: Mac OS cannot posture check on Temporal Agent

jewfcb001 — Fri, 12 Jun 2026 06:49:55 GMT

@Rob Ingram macOS can resolve ise hostname . It's wireless authentication . and DACL we use same configuration with windows.
windows is working fine.

Re: Mac OS cannot posture check on Temporal Agent

jewfcb001 — Fri, 12 Jun 2026 09:00:24 GMT

@Rob Ingram
this is acl for redirect to posture check

ip access-list extended ISE_Redirect
10 deny ip any host x.x.x.x
20 deny ip host x.x.x.x any
21 permit tcp any host x.x.x.x eq 8443
30 permit udp any any eq domain
40 permit udp any eq domain any
50 permit tcp any any eq www

x.x.x.x is IP of ISE

Re: Mac OS cannot posture check on Temporal Agent

jewfcb001 — Mon, 15 Jun 2026 02:04:53 GMT

@Rob Ingram what is the any check for macOS ?