Which Cisco ISE service checks the compliance of endpoints before allowing the endpoints to connect to the network?

The Cisco ISE posture service performs a check on endpoints to ensure they meet specific security requirements, such as having up-to-date antivirus definitions or operating system patches, before being allowed to connect to the network.

The profiler service identifies and categorizes endpoints based on their characteristics, but it does not perform compliance checks.

Cisco TrustSec is an architecture for policy enforcement using Security Group Tags (SGTs), not a service that checks endpoint compliance directly.

Threat Centric NAC integrates threat intelligence with network access control but is not the specific service within ISE responsible for initial compliance checks.