ISE 2.x Posture: Is it possible, to ...

[Frank Lothar Weber]

Hi, all.

I was just wondering:

Since we had so many problems with clients that have both network adapters (lan and wlan) enabled at the same time, is it somehow possible to create a posture condition that would check if more than one active interface is detected and then reject the client ???

Rgs

Frank

[Marvin Rhoads · Accepted solution]

It may be possible but would not be easy using posture since you'd have to check specific registry keys.

I'd just recommend using AnyConnect NAM - it enforces use of only one network adapter at a time.