Posture Dictionary Simple Conditions

[Ricardo T Duarte]

Hi,

I would like to make the client "not compliant" and show a "link remediation" when the device is not MDM enrolled.

I know I can redirect users to the MDM portal, but would prefer to have everything under Anyconnect Posture.

What I can see that can help is the "Dictionary Simple Conditions", but I can only see a very limited number of attributes to be selected. And MDM ones are missing.

My questions are:

- Why are the MDM attributes not showing for "Dictionary Simple Conditions". Is the list that shows fixed or can I add my own attributes?

- Any other way of achieving what I want?

Thanks

[hslai · Accepted solution]

---

- Why are the MDM attributes not showing for "Dictionary Simple Conditions". Is the list that shows fixed or can I add my own attributes?

ISE MDM and ISE Posture are two different flows and they do not normally mixed together. Only selected dictionaries and attributes are available as conditions for ISE Posture and Client Provisioning. If you have a good use case to incorporate them together, please either voice it through the account team or send it through the feedback link in ISE. 

---

- Any other way of achieving what I want?

---

Please look at the existing dictionaries and attributes available in ISE posture. For example, Endpoints dictionary is there so we could deduce MDM enrollment status from EndpointPolicy.