What posture checks are
A posture check is a condition a device must meet for a policy to grant it access. If the device does not meet it, the policy does not apply and the device does not get that access, even if the user signed in successfully.
They are managed under Access Control › Posture Checks and linked to one or more policies.
Types of checks
The conditions available in the panel include:
- Client version: require a minimum FiveGuardian5 client version.
- Operating system and version: allow only certain operating systems or minimum versions.
- Geographic location: allow or block access based on the country or region the device connects from.
- Device network range: allow or block based on the local network the device is on.
- Running process: require a given program to be running on the device.
Results from endpoint security (EDR) platforms can also be used as a condition; see EDR in Integrations.
Creating and applying a posture check
- Go to Access Control › Posture Checks and create a new check with a descriptive name.
- Choose and configure one or more conditions.
- Save the check.
- Open the policy under Access Control › Policies you want to apply it to and add it in the posture checks section.
- Test with a compliant device and, if possible, a non-compliant one before applying it to everyone.
Cautions
- An overly strict posture check can cut off many users at once, for example by requiring a version that has not yet been rolled out to all devices. Coordinate version requirements with your IT team, which manages updates.
- Geographic restrictions affect people who travel. Consider exceptions before enabling them.
- Apply posture checks to a pilot group first.
- Document in the description why each check exists.
Posture checks limit access to resources through policies. They do not replace device protection or the internet block outside the office, which work independently.