Add NAC endpoint attributes to a DAP record

You can configure Network Access Control (NAC) endpoint attributes within a DAP (Dynamic Access Policy) record to evaluate endpoint posture status based on a defined criteria.

NAC endpoint attributes in DAP records help determine access permissions based on endpoint posture compliance. You can specify whether endpoints must match all criteria or any criteria, and define specific posture token strings for evaluation.

Procedure

Step 1

Choose Secure Connections > Dynamic Access Policy.

Step 2

Create or edit a DAP policy and a DAP record.

Step 3

Click the Endpoint Criteria tab and click NAC.

Step 4

Select the Match criteria as All or Any.

Step 5

Click + to add NAC attributes.

Step 6

In the NAC dialog box, set the operator to be equal to = or not equal to ≠ the posture status.

Step 7

Choose one of these options from the Posture Status drop-down list:

  • Compliant

  • Non-Compliant

  • Unknown

Step 8

Click Save.