Posture Before User Login

[ryanbess]

Hi all,

Is it possible for posturing to happen when a user is not logged in?  A good use case would be to ensure all workstation have an up to date patch that addresses a Zero day.  If the Zero day patch is not found on a workstation then ISE could quarantine it.  It seems silly to not have this feature and to require a computer to have a user logged into it before posture assessment.  In my googling I've found older posts that say posture can ONLY be ran after a user logs in and I'm hoping that is still not the case. 

[hslai]

@ryanbess Ideally such task is done by a patch or endpoint management system. If you are unable to them, then you may try Agentless Posture.

[ryanbess]

Hi @hslai are you confirming that it is unable to provide this data at all or must a user be logged in for the agent to report this data?  We want to get away from agent less.  This is where forescout seems to excel.  It can return this level of data and provides software inventory for all OS’s.  I understand tools have limitations, trying to learn if this is just one of those limitations.

[hslai]

@ryanbess ISE agentless posture does include application inventory and hardware inventory. The regular ISE posture agent is by design to interact with the logged-in user. We do have a similar feature request in our backlog.