Can a posture policy be created that enforces HD encryption but allows unencrypted USB?

[jmorin60]

Would like to enforce encryption using anyconnect as the posture client; forcing encryption on HardDrives but not on any connected USB drives.

If this possible?

Thx

[Craig Hyps · Accepted solution]

With ISE 2.3 and earlier, answer would depend on client OS. For Windows, you could list specific drive letters like C and D to enforce encryption, but other letters commonly used for external/USB drives not enforced.

/Craig