Cisco ISE Posture Policy not Updating on client.

[joeharb]

I created Posture Policy to for application Collection and to verify a process was running the machine.  I have add a few more requirements to the original Policy but the client isn't checking for the new ones, only the original 2.  Is this updated dynamically or do you simply have to create a new one...what if you want to remove a requirement?

Thanks

Joe

[Jason Kunst]

The client will only check on new authentication. Did you try doing a COA session termination to kick off a new request?

[joeharb]

I have rebooted/disabled the NIC, migrated from wired to wireless but it still only scans for "2" items.

Thanks,

Joe

[Aravind Ravichandran]

Hi Joe,

Are you able to see all the conditions in Posture detailed log?

If you have selected audit for some posture conditions, it won't show in scan summary on the anyconnect.

-Aravind

[Surendra · Accepted solution]

Did you have posture lease configured by any chance on your ISE? IF yes, request you to delete the endpoint from the ISE and then try again.

[joeharb]

I have checked the posture report and it only shows the 2 requirements, all 4 of the ones are set to mandatory.  Posture Lease is set for every time user connects to network.

Please advise,

Joe