{"pageModel":{"attributes":{"id":"","name":"121397.dita","viewName":"DitaDetail"},"elements":{"ditaContent":{"name":"DITAContent","value":"
\r\n

Add a VPN Connection Posture Profile

\r\n
\r\n
\r\n

Configure a VPN connection posture profile to define posture requirements for end-user devices connecting to the network using VPN. The VPN client must be installed on the end-user device, and Secure Access checks the requirements when the device connects to the network.

\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
\r\n\r\n
 		\r\n
Each requirement is optional. Configure requirements in any order. Endpoints must meet all conditions of any configured requirement.
\r\n
\r\n
\r\n
\r\n
\r\n

Before you begin

\r\n
\r\n
    \r\n
  • Full Admin role in Secure Access. For more information, see Manage Accounts.
    • \r\n
\r\n
\r\n
\r\n

\r\n

Procedure

\r\n\r\n
\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
1\r\n

Navigate to \r\nSecure > Profiles > Endpoint Posture Profiles.

\r\n
2\r\n

For VPN Connection, click Add Posture Profile.

\r\n
\r\n\"Endpoint\r\n
\r\n
3\r\n

Give your posture profile a good descriptive Name.

\r\n
4\r\n

\r\n For the Operating System option, choose the operating systems for your profile. Click Save and Exit or Next to select endpoint security agents.

\r\n
For more information, seee Supported Operating Systems.\"Operating\r\n
\r\n
5\r\n

For the Endpoint security agent option, choose the operating systems for your profile. Click Save and Exit or Next to select Windows registry entries.

\r\n
For more information, see Endpoint Security Agents.\"Endpoint\r\n
\r\n
6\r\n

For the Windows registry entries option, choose the operating systems for your profile. Click Save and Exit or Next to select endpoint firewalls.

\r\n
\r\n

For more information, see Windows Registry Entries.

\r\n\"Windows\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
\r\n\r\n
 		\r\n
The posture check for the Registry Path only requires the navigation path to the directory containing the registry. The key name of the registry should not be included in the registry path.
\r\n
\r\n
\r\n
7\r\n

For the Firewall option, choose the firewall for your profile. Click Save and Exit or Next to select disk encryption.

\r\n
For more information, see Firewall Requirements.\"Firewall\r\n
\r\n
8\r\n

For the Disk encryption option, choose the disk encryption package(s) for your profile. Click Save and Exit or Next to configure any OS file requirements.

\r\n
For more information, see Disk Encryption.\r\n\r\n\r\n\r\n\r\n\r\n\r\n
\r\n\r\n
 		\r\n
By default the disk encryption check only detects for the presence of disk encryption software but does not require that particular disk drives are encrypted. On a Windows platform it is possible to require that the default C:\\ drive is encrypted. Reach out to your Cisco team for assistance.
\r\n
\r\n\"Disk\r\n
\r\n
9\r\n

For the File option, specify any files that are required for the operating system. Click Save and Exit or Next to configure any OS process requirements.

\r\n
For more information, see File Requirements.\"File\r\n
\r\n
10\r\n

For the Processes option, specify any process that are required for the operating system. Click Save and Exit or Next to configure any endpoint certificates.

\r\n
\r\n

For more information, see Process Requirements.\r\n

\r\n\"Processes\r\n
\r\n
11\r\n

For the Certificate option, specify up to two certificates to authenticate each endpoint. Click Save and Exit or Next to return to the OS requirements.

\r\n
\r\n

For more information, see Certificate Requirements.

\r\n\"Certificate\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
\r\n\r\n
 		\r\n
\r\n If you select SAML attribute name as a certificate type with the intention of using this profile in a VPN profile, the subject name must match the group attribute statement in your SAML application configuration.\r\n
\r\n
\r\n
\r\n
12\r\n

Review and finalize the profile.

\r\n
\r\n
\r\n
\r\n","ditaVal":"","format":"html"},"bookTitle":{"value":""},"shortDescription":{"value":""}}},"parameters":{"appId":"SecureAccess","topicAlias":"add-vpn-posture-profile"}}