ISE posture to check Umbrella roaming client services

[raksec]

Hi,

We are having a use case where we want ISE to posture endpoints and check for presence of Umbrella roaming client. If client is not running or uninstalled then block the network access and remediate.

I found in compatibility guide that ISE can check for Cisco anyconnect client only, not Umbrella roaming client. Is there a way to make it possible?

Thanks,

Rakesh Kumar

[hslai · Accepted solution]

It might be due to the fact that this is a module of AnyConnect and that it runs as a service.

I would suggest to check for AnyConnect but please note CSCvj57967 and CSCvk65769. Also, we may add a posture service condition on the Umbrella service, as Mike.Cifelli suggested in Re: ISE Posture Condition - Cisco Community

[raksec]

Thank you for the response.

[manvik]

Would it work if posture agent check for umbrella service running or not.