We are working with ISE 2.3 and Posture assesment feature.
To allow network access to a specific client we need to verify the following statement:
-Specific application are NOT present on the system (i.e. nmap.exe)
In this environment we can't use Anyconnect, is mandatory the use of Temporal Agent
From my point of view the only way to verify the absence of a specific application to create a posture remediation action with the manual uninstall option configured, but this requires the use of Anyconnect.
Although Temporal agents do not support remediations triggered by a button in the agent UI, we may show a message text and ask the users to manual perform the actions. Attached shows an example of failing the windows firewall condition.