MENU
[Endpoint Protection and Detection]
Which security solution is used for posture assessment of the endpoints in a BYOD solution?
Cisco ISE is the security solution that is used for posture assessment of the endpoints in a BYOD solution. Posture assessment allows Cisco ISE to inspect the security health of the endpoints, such as their operating system, software applications, network settings, and security software. Cisco ISE can then enforce posture policies based on the compliance status of the endpoints and grant or deny them access to the network resources. Cisco ISE supports different types of posture agents, such as AnyConnect, AnyConnect Stealth, and Temporal Agent, to monitor and remediate the endpoints. Cisco ISE also supports agentless posture for devices that cannot run an agent, such as printers, cameras, and IoT devices. Cisco ISE integrates with various third-party vendors to provide posture assessment for different endpoint platforms, such as Windows, Mac, Linux, Android, and iOS.Reference:=
Some possible references are:
Cisco Identity Services Engine Administrator Guide, Release 3.0 - Compliance
Chapter 15. Device Posture Assessment - Cisco ISE for BYOD and Secure Unified Access
Implementing and Operating Cisco Security Core Technologies (SCOR) v1.0