Cisco Secure Access Help

PDF

Cisco Secure Access Help

Manage VPN Connection Posture Profiles

Updated: September 15, 2026

Want to summarize with AI?

Log in

Describes Manage VPN Connection Posture Profiles in Cisco Secure Access. Posture profiles define requirements for user devices when accessing resources and the network.

Posture profiles define requirements for user devices when accessing resources and the network.

Profiles in this list apply when users access specific resources using VPN. The VPN client must be installed on the end-user device. Requirements are checked when the device connects to the network.

VPN Posture Attributes

  • Operating System

  • Endpoint security agent

  • Windows registry entries

  • Firewall

  • Disk encryption

  • Files

  • Processes

  • Certificates

Add a VPN Connection Posture Profile

Configure a VPN connection posture profile to define posture requirements for end-user devices connecting to the network using VPN. The VPN client must be installed on the end-user device, and Secure Access checks the requirements when the device connects to the network.

Note
Each requirement is optional. Configure requirements in any order. Endpoints must meet all conditions of any configured requirement.

Before you begin

  • Full Admin role in Secure Access. For more information, see Manage Accounts.

Procedure

  1. Navigate to Secure > Profiles > Endpoint Posture Profiles.

  2. For VPN Connection, click Add Posture Profile.


    Endpoint Posture Profiles page showing option to add new posture profile

  3. Give your posture profile a good descriptive Name.

  4. For the Operating System option, choose the operating systems for your profile. Click Save and Exit or Next to select endpoint security agents.

    For more information, seee Supported Operating Systems.
    Operating System page showing option to select the desired operating system for posture profile and save the changes

  5. For the Endpoint security agent option, choose the operating systems for your profile. Click Save and Exit or Next to select Windows registry entries.

    For more information, see Endpoint Security Agents.
    Endpoint security agents page showing option to select the desired endpoint security agent for the posture profile and save the changes

  6. For the Windows registry entries option, choose the operating systems for your profile. Click Save and Exit or Next to select endpoint firewalls.

    For more information, see Windows Registry Entries.


    Windows registry entries page showing option to select the desired Windows registry entries for the posture profile and save the changes
    Note
    The posture check for the Registry Path only requires the navigation path to the directory containing the registry. The key name of the registry should not be included in the registry path.

  7. For the Firewall option, choose the firewall for your profile. Click Save and Exit or Next to select disk encryption.

    For more information, see Firewall Requirements.
    Firewall page showing option to select the desired firewall for the posture profile and save the changes

  8. For the Disk encryption option, choose the disk encryption package(s) for your profile. Click Save and Exit or Next to configure any OS file requirements.

    For more information, see Disk Encryption.
    Note
    By default the disk encryption check only detects for the presence of disk encryption software but does not require that particular disk drives are encrypted. On a Windows platform it is possible to require that the default C:\ drive is encrypted. Reach out to your Cisco team for assistance.

    Disk encryption page showing option to select the desired disk encryption packages for the posture profile and save the changes

  9. For the File option, specify any files that are required for the operating system. Click Save and Exit or Next to configure any OS process requirements.

    For more information, see File Requirements.
    File page showing option to specify the files required for the operating system and save the changes

  10. For the Processes option, specify any process that are required for the operating system. Click Save and Exit or Next to configure any endpoint certificates.

    For more information, see Process Requirements.


    Processes page showing option to select the desired processes for the operating system and save the changes

  11. For the Certificate option, specify up to two certificates to authenticate each endpoint. Click Save and Exit or Next to return to the OS requirements.

    For more information, see Certificate Requirements.


    Certificate page showing option to specify up to two certificates for endpoint authentication and save the changes
    Note
    If you select SAML attribute name as a certificate type with the intention of using this profile in a VPN profile, the subject name must match the group attribute statement in your SAML application configuration.

  12. Review and finalize the profile.