Users Guide

l Infected. Client is infected and is a threat to other systems in the network; network access should be denied or
severely restricted.
l Unknown. The posture token of the client is unknown.
Upon completion of all configured posture checks, Policy Manager evaluates all
application tokens
and calculates a
system token,
equivalent to the most restrictive rating for all returned application tokens. The
system token
provides
the health posture component for input to the Enforcement Policy.
A Service can also be configured without any Posture policy.
Configuring Posture
The following image displays how to configure Posture at the Service level. Note that the Posture Compliance check
box must be selected on the Service tab in order for Posture to be enabled.
Figure 116: Posture Features at the Service Level
You can configure the following features of posture:
Table 88:
Posture Features at the Service Level
Configurable Component How to Configure
Sequence of Posture
Policies
Select a Policy, then select Move Up, Move Down, Remove, or View Details.
l To add a previously configured Policy, select from the Select drop-down list,
then click Add.
l To configure a new Policy, click the Add New Policy link and refer to "Adding
and Modifying Posture Policies " on page 172.
l To edit the selected posture policy, click Modify and refer to "Adding and
Modifying Posture Policies " on page 172.
Default Posture Token The default posture token is UNKNOWN (100)
Remediation End-Hosts Select this check box to enable auto-remediation action on non-compliant
Dell Networking W-ClearPass Policy Manager 6.0 | User Guide 171