ISE Posture

[Mani G]

Hey all,

ISE 3.1

I've set up a USB block policy element in Posture in ISE. During authentication, everything is operating as it should; it is becoming compliant and checking for USB checks.

My query is this: I attempted to connect USB to my gadget after it was compliant, but sadly, USB was identified and operational. Could someone maybe explain how to fix this?

Thanks in advance.

[ahollifield]

What is the posture lease time for?  Posture is only evaluated at connection time until the timer expires and then Cisco Secure Client sends a new posture report to the PSN.  If you are looking to always disable USB, this should done using some other endpoint control agent that is always running, not Posture.