Can Cisco ISE Check on Domain-Joined Computers

[NasserMousa]

Hi

We have many laptops that are un-compliant (missing drivers, OS, and software updates). We did our best to reach these end-users but still facing availability issues.

I have asked Network team to help me out to prevent entering any un-compliant laptop to internal network, but they said: "we know how to do this on non-joined laptops (BYOD); but for joined laptops!, we don't know whether we can do "Posture Assessment" for them or not!"

Can ISE help us in this case? if not, is there any product can help?

Thank you

[Kasun Bandara · Accepted solution]

@NasserMousa hi, ISE have tons of features for this kind of requirements. you can use posture at any case (yes you need licenses). you can set posture rules to check software, OS, AV, registry, etc... also can run on any device joined to AD or not joined to AD. you just need correct rule at correct place.