Cisco ise problem or flaw

[maulibels85]

Running cisco ise 2.3 patch 5. Keep having posture redirect problem. What does this do and why do I even have it? Not using remediation.

[Mike.Cifelli · Accepted solution]

See here for a better understanding of the solution: https://community.cisco.com/t5/security-documents/ise-posture-prescriptive-deployment-guide/ta-p/3680273

My assumption would be that you have redirect enabled in one of your authz profiles that clients are hitting in your radius policies.  You can rely on your radius live log to point you in the right direction.  I would recommend looking there and disabling/removing it.  Also, you can disable any/all posture and client provisioning policies if needed.  HTH!