An administrator must configure Cisco ISE to distribute Cisco Secure Client to Windows systems.

Client provisioning policies must be configured so Cisco ISE can determine which software package and configuration should be supplied to each connecting Windows endpoint. These policies evaluate endpoint characteristics such as operating system, architecture, and client status, and then associate the applicable Cisco Secure Client package and configuration. A posture profile must also be created to define how the Secure Client posture module communicates with Cisco ISE and performs posture-related operations. The BYOD portal supports personal-device onboarding and certificate provisioning, not mandatory Secure Client posture-agent distribution. An authentication profile is not a required policy object for this workflow. Remediation actions are used after posture requirements detect a noncompliant condition, such as an outdated antivirus product. They are not required merely to redirect an endpoint, install Cisco Secure Client, and establish the posture-agent configuration specified in the scenario.