Security

Hi everyone,

I have a question regarding OnGuard posture checks on ClearPass 6.11.12.

In my environment, when users arrive at work and power on their laptops, the OnGuard Agent is one of the first applications to start. This behavior often puts the device into Quarantine immediately, because many Windows services and security components (AV, patches, etc.) are still initializing.

Is there any way to delay the OnGuard posture check after boot?
For example: wait 5 minutes after the OS has started so that Windows services are fully up before OnGuard runs the posture validation.

Has anyone implemented a startup delay or similar mechanism for OnGuard posture checks?
If yes, how can this be configured (Agent settings, policy adjustments, or Windows service tweaks)?

Thanks in advance for your insights!

-------------------------------------------

I think that's what the Grace Period is for, or what it can be used for.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------