cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
200
Views
5
Helpful
1
Replies
Highlighted
Contributor

Using posture conditions

Hi All,

I see that when configuring the posture policies, all the conditions that I specify will be evaluated based on AND operation.

But, what if I want to specify condition based on OR operation?

This is because I have a requirement, where I am checking for Windows Defender as well as presence of another anti-virus running on the computer.

The posture policy that I was able to, where I am checking if, presence of Windows Defender as well as another any anti-virus.

But, I am not able to figure out a way where, say, Windows defender is not running and but another anti-virus is present on the client.. then the policy that I configured above will still be false..

Would this work, if I keep Windows Defender check as optional and any anti-virus as mandatory?

Everyone's tags (3)
1 REPLY 1
Cisco Employee

Re: Using posture conditions

 

In configuring an ISE posture requirements, we may have OR the conditions by "Any selected conditions succeeds".

In configuring an ISE posture policy rule, we may flag a requirement as optional.

Here are some examples:

Or Requirements

(view in My Videos)

Mandatory / Optional Requirements

(view in My Videos)