ISSUE NAC ISE, Windows disk encryption

[Altitude07]

I ran into the problem with ISE NAC version 3.5 on the client PC, I'm having the disk encryption issue. How can I fix it?

[Mark Elsen]

  - @Altitude07                   What is the problem ?

  M.

[Altitude07]

I am currently deploying NAC ISE. On users' PCs, in Cisco AnyConnect, I only get 'check disk working' and on NAC 'non-compliant'.

[Kasun Bandara]

@Altitude07 hi, its looks like your posture policy is blocking access due to non complient with the posture policy in ISE. did you enabled the disc encryption check in policy? if so make sure your PC disk encrypted to be complied with posture policy. or disable the posture policy disk check rule and see if that works. then try enabling again with encrypting the disk.

[Altitude07]

Thanks a lot for your reply. Yes, the disk is encrypted, but it's still the same thing.

[Kasun Bandara]

@Altitude07 try to check if the policy is configured with correct parameters.

[Altitude07]

Hi @kasun , yeah I checked and there are good settings. But yesterday I tested on 10 PCs, and only one PC responded as compliant, the rest were not.