Question

A company runs Cisco ISE and must perform posture assessment on two groups: full-time employees using corporate laptops, and short-term contractors who bring unmanaged personal laptops for a two-week engagement. The security team wants contractors checked for antivirus and OS patch level without permanently installing software on their machines, while employees should have a persistent posture agent that continuously monitors compliance. Which approach meets both requirements?

Accepted Answer

Deploy the Cisco Secure Client ISE Posture module persistently on employee laptops and use the Cisco Temporal Agent for contractor posture checks

Answer

Use the Cisco Temporal Agent for both groups since it avoids any permanent installation and simplifies management

Answer

Install the persistent Cisco Secure Client ISE Posture module on all endpoints, including contractor laptops, to ensure continuous monitoring

Answer

Use MAB for contractors and 802.1X with the posture agent for employees, relying on profiling instead of posture for the contractors