Posture Unknown flow for endpoints without Posture agent Installed

[rezaalikhani]

Hi all;

Consider the following Authorization Policy:

In this case, although I have configured the "Default Posture Status" setting as "Compliant", but as soon as an endpoint without posture agent installed connects to the network, it matches with the "Posture Unknown" condition and therefore, the limited dACLs applies to it.

Any ideas?

Thanks

[rezaalikhani]

The desired VLAN includes both Windows 10 and Windows 7 machines and therefore, when a Windows 7 computer connects to the network, it always matches with the configured "Unknown" policy which has very limited network connectivity and unfortunately stucks in this stage (because of Windows 7 supportability for ISE Posture Module, the client cannot include this module installed. Right?). I want to bypass this policy for Windows 7 PCs without using Profiling Policy inclusion of just Windows 10 PCs.

The following is the fact from the client (with Windows 7) that ISE has gathered?

Any ideas?

Thanks

[Aref Alsouqi]

How about selecting only Win 10 operating system in the posture assessment policy and conditions?

[rezaalikhani]

Thanks for your reply;

This is my first possible solution but without success. 

[Aref Alsouqi]

If you could please share the screenshot of your posture assessment configuration for review.