Device Posture
Check the machine before you trust it.
Before a device reaches anything, it reports what it can say about itself: disk encryption, antivirus, and whether it is managed. You decide whether a failing device is only reported or loses access.
| Device | Owner | State | Failed Check |
|---|---|---|---|
| HP-LAP-042 | Lena Park | Compliant | — |
| MBP-SAM | Sam Reyes | Failing | Disk encryption off |
| LNX-DEV-7 | Priya Nair | Not Reported | — |
Posture that says what failed.
Three states, and a row that names the check, so the fix is usually obvious.
Compliant, Failing, Not Reported
A device that never checked in is treated differently from one that failed.
The failing check, by name
Encryption off, antivirus not running, a device that left management.
Report first
Record what each device looks like and block nothing, until you know the fleet.
Block when ready
Withhold access from a failing device. It returns on its own once it is fixed.
Knows the office
A location tells a device it is at the office, from domains, networks or internal names.
Accepted certificates
Record the lab switch or printer whose self-signed certificate you decided is fine.
One setting, three positions.
Off collects nothing. Report records what every device looks like and blocks nothing. Block withholds access from a device that fails.
- Start in Report on a fleet nobody has measured
- The device keeps reporting when blocked
- Fix it on the machine and it clears itself
Works with the management tools you run.
Device posture can draw on MDM, EDR and XDR on the Small plan and above.
| State | Devices |
|---|---|
| Compliant | 41 |
| Failing | 3 |
| Not Reported | 2 |
Posture is the gate everything else assumes.
Device posture with MDM, EDR and XDR from the Small plan, $5 per user per month.
Asked often.
Where should I start?
In Report. Switching straight to Block on a fleet nobody has measured takes access away from people who did not know they were failing.
How does a device get back in?
Fix the failing check on the machine. It keeps reporting, and returns on its own once it passes.
What does Not Reported mean?
The device has not checked in yet. It may simply not have run since you set the rules, which is not the same as failing.