Skip to content

Device Posture Settings

We are supporting device postures for Windows, Linux,and MacOS.

You can create device posture profiles with Add button.

Warning

Test the profile before using it in production.

Supported Settings

Windows MacOS Linux
Client Version (Working client version) Yes Yes Yes
Mac Address (Client ethernet device address) Yes Yes Yes
Serial Number (Bios serial or Product uuid) Yes Yes Yes
File (Check if file exists, sha256 check ) Yes Yes Yes
Process (Check if process is working, write a search name like chrome, sha256 check) Yes Yes Yes
Registry (Check if a registry path exists, also key and value check) Yes No No
Antivirus (Check if antivirus is working) Yes No No
Firewall (Check if firewall is working) Yes Yes No
Disc Encryption (Check if disc encryption actived) Yes Yes Yes

Options

Minimum client version

The minimum required client version as below, 1.4.0 and above versions can access.You can get the client version from the client app Options button by clicking.

Warning

Works on Windows | Macos | Linux

minimun client device posture

Macs

Client mac addresses are always detecting. With [ , ] separation you can check

Warning

Works on Windows | Macos | Linux

interface mac list device posture

Serials

We are trying to get bios serial or product uuid as below. If we cannot get bios serial, then try to get OS installed uuid. With [ , ] separation you can check.

Warning

Works on Windows | Macos | Linux

machine serial device posture

We are getting as below

  • Windows

    wmic bios get serialnumber
    
    wmic csproduct get uuid
    
  • MacOS

    system_profiler SPHardwareDataType
    

    Serial Number and UUID fields

  • Linux

    dmidecode -s system-serial-number
    
    dmidecode -s system-uuid
    

File

Check if file exists, write full path, and fill SHA256 if you want to check SHA256 value

Warning

Works on Windows | Macos | Linux

Sha256 calculation as below

  • Windows

    cmd.exe /c certUtil -hashfile "$file" SHA256
    
  • MacOS

    shasum -a 256 "$file"
    

    Serial Number and UUID fields

  • Linux

    shasum -a 256 "$file"
    

check file device posture

Process

Check if process is working, write a search name like chrome, and sha256 if want to check working file sha256.

Warning

Works on Windows | Macos | Linux

Warning

On windows sha256 is not working

check process device posture

Registry

Check if a registry path exists. If you want to check key, enter a value for key

Warning

Works on Windows

Registry calculation as below

  • Windows

    reg query $path
    
    reg query $path /v $key
    

check registry device posture

Antivirus

Check if antivirus is working

Warning

Works on Windows

Antivirus calculation as below

  • Windows

    wmic /namespace:\\\\root\\SecurityCenter2 path AntivirusProduct get * /value
    

check antivirus device posture

Firewall

Check if firewall is working

Warning

Works on Windows | MacOS

Firewall calculation as below

  • Windows

    netsh advfirewall show publicprofile
    

    State field

  • MacOS

    pfctl -s info
    

    Status field

check firewall device posture

Disc Encryption

Check if disc encryption actived.

Warning

Works on Windows | Macos | Linux

  • Linux

    lsblk|grep crypt|wc -l
    
  • Windows

    manage-bde -status
    
  • MacOS

    diskutil info /System/Volumes/Data 2>/dev/null |grep FileVault
    

check disc encryption device posture