Question

A company uses Cisco ISE with posture assessment to control network access for corporate laptops. Security policy requires that any endpoint missing the latest antivirus definitions be given limited access to a remediation server to download updates, rather than full network access, until it becomes compliant. Which ISE posture concept enforces this behavior?

Accepted Answer

Using a redirect ACL and a posture remediation policy that grants access only to remediation resources while the endpoint is noncompliant

Answer

Assigning the endpoint to a quarantine VLAN permanently after any authentication failure

Answer

Configuring a RADIUS Change of Authorization to disconnect the endpoint session entirely until manual reinstallation

Answer

Applying an 802.1X machine authentication certificate to bypass posture checks for corporate assets