Posture Compliant

[onikaycee]

Good day all, 

I have configured ISE posture services on my ISE 2.2. standalone and it has been rolled out to the end users  but what i have noticed is that even after the Users get compliant, they get IP address and  later loose the IP address at some point and then go for another check before they get compliant. I have tried to figure this out but its eluding me.. What could be wrong? I would appreciate on this.
Thank you in advance

[marce1000]

 - In 'postured-sequences' this can be experienced as 'normal' ; since a connection is needed to communicate with the posture-agent first, and  a definite authorization must be accomplished/verified (according to defined policies)

M.

[onikaycee]

hmm, i have 2 policy for posture, 1 is not equal to compliant and 2 is equals to complaint. so, you feel this behavior is normal for the users to disconnect and reconnect at intervals?

[marce1000 · Accepted solution]

 - That depends, ISE  can be configured to regulary check posture-compliance, I don't know the details of your setup. Not sure this is the cause.

M.

[onikaycee]

thanks man..i have set the posture checks to 1 day and it seems steady now