Posture Policy Precedence

[henokk60]

Hi All

I have created two different posture policies for our corporate organizational units/departments, as some environments are riskier and I wanted to minimize potential disruption. In the first policy, under the "Other Conditions" column, I specified FinanceOU, and set all the conditions in the "Requirements" field to Audit mode. Below this policy, I added another policy that applies to all remaining departments, and its conditions are set to Mandatory.

However, when reviewing the logs, I noticed that devices from the Finance department are matching both posture policies. I initially thought the posture policy would behave like ACLs, processing from top to bottom and stopping at the first match. What did I miss, and how can I fix this?

Thanks

[MHM Cisco World]

Posture is run after user is authc as a condition of authz 

It not run always and for all device 

MHM

[henokk60]

@MHM Cisco WorldThank you for your reply. I got your point and After authentication, it comes to authorization, so how can we determine which posture policy will be applied for each department?