Device Posture service in test mode - Preview

The Device Posture service is also available in test mode wherein admins can test the Device Posture service before enabling it on their production environment. This enables the admins to analyze the impact of the device posture scans on the end user devices and then plan their course of action accordingly before enabling it on production. The Device Posture service in test mode collects data of the end user devices and classifies the devices into the three categories namely, compliant, non-compliant, and denied. However this classification does not enforce any actions on the end user devices. Instead, it empowers administrators to evaluate their environments and enhance security. Admins can view this data on the Device Posture dashboard. Admins can also disable the test mode, if required.

Note:

The EPA client must be installed on the devices. In case an end device does not have the EPA client installed, Device Posture service presents a download page to the end user to download and install the client, without which the end user cannot log on.

Enable test mode

1. Sign in to Citrix Cloud, and then select Identity and Access Management from the hamburger menu.
2. Click the Device Posture tab and then click Manage.
3. Slide the Device posture is disabled toggle switch ON.

4. In the confirmation window, select both the check boxes.

   

5. Click confirm and enable.

When the Device Posture service is enabled in test mode, the Device Posture home page displays a note confirming the same.

Admins can configure the policies and rules for device posture scans. For details, see Configure device posture. Based on the scan results, the end user devices are classified as compliant, non-compliant, and denied. Admins can view this data on the dashboard.

View the test mode activities on dashboard

1. Click the Dashboard tab on the Device Posture page.

   The Diagnostic logs chart displays the number of devices classified as compliant, non-compliant and login denied.

2. To view the details, click the See more link.

Test mode diagnostics

Admins can download the monitoring logs from the UI.

Enable test mode in production

If the Device Posture service is already enabled on production, perform the following steps to enable the test mode:

1. On the home page, slide the Device Posture is enabled toggle switch OFF.
2. Select I understand all device posture checks will be disabled.
3. Click confirm and disable.
4. Now enable device posture by sliding the Device Posture is disabled toggle switch ON.
5. In the confirmation window, select both of the following options.
   • Enable device posture in test mode
   • I understand the impact on subscriber experience
6. Click confirm and enable.