Using posture conditions

[dgaikwad]

Hi All,

I see that when configuring the posture policies, all the conditions that I specify will be evaluated based on AND operation.

But, what if I want to specify condition based on OR operation?

This is because I have a requirement, where I am checking for Windows Defender as well as presence of another anti-virus running on the computer.

The posture policy that I was able to, where I am checking if, presence of Windows Defender as well as another any anti-virus.

But, I am not able to figure out a way where, say, Windows defender is not running and but another anti-virus is present on the client.. then the policy that I configured above will still be false..

Would this work, if I keep Windows Defender check as optional and any anti-virus as mandatory?

[hslai]

In configuring an ISE posture requirements, we may have OR the conditions by "Any selected conditions succeeds".

In configuring an ISE posture policy rule, we may flag a requirement as optional.

Here are some examples:

Or Requirements

Mandatory / Optional Requirements