Posture and Network acess(ISE)

[vilasreddy]

If same set of devices are referenced in a posture policy set and normal wired/wireless   policy sets with different authorization profiles ,to which policy set does it match?

[Kasun Bandara · Accepted solution]

@vilasreddy policy set working top to bottom. but you can set action to process with another policy or only process matched policy,

[vilasreddy]

For suppose wired/wireless policy sets are above the posture policy set ,and it hits the wired/wireless policy set first ,how will the posture be enforced?

[Aref Alsouqi · Accepted solution]

You wouldn't create a separate policy set for posture assessment, instead the posture assessment authorization rules should be created within the existing policy set(s). For instance, say you have two separate policy sets, one for wired and one for wireless. What you would need to do for posture assessment is going inside each of these two policies and add the posture assessment authorization rules for the unknown, non-compliant, and compliant.