An administrator plans to use Cisco ISE to deploy posture policies to assess Microsoft Windows endpoints that run Cisco Secure Client. The administrator wants to minimize the occurrence of messages…

Question

Options

• AConfigure a native supplicant on the endpoints to support the posture policies
• BInstall the compliance module on the endpoints
• CInstall the latest version of the Secure Client dent on the endpoints
• DEnable Cisco ISE posture on Secure Client configuration.

• A
  3% (1)
• B
  91% (31)
• C
  6% (2)

Explanation

Cisco Secure Client (formerly AnyConnect) is a modular platform; the posture assessment functionality is provided by a separate component called the Compliance Module. Even if Cisco Secure Client is fully deployed and all ISE authentication, authorization, and posture policies are configured, without the Compliance Module installed on the endpoint, Secure Client cannot perform the actual posture checks (such as verifying AV status, OS patches, or registry keys). The absence of the Compliance Module results in ISE being unable to determine the endpoint's posture state, leading to 'unknown posture' messages. Installing the Compliance Module enables Secure Client to communicate posture results to ISE, completing the posture assessment workflow and eliminating those unknown posture notifications.

No community discussion yet for this question.