Courts require that Windows devices missing a critical security pat…

Question

Courts require that Windows devices missing a critical security patch lose SSO to case-management apps. How should the administrator enforce that?

Accepted Answer

Mark missing-patch devices non-compliant in Workspace ONE UEM and deny those devices in the Workspace ONE Access policy for case apps — Missed patches should lock the courtroom app door, not flatten the whole court VLAN. Feed patch status into UEM compliance and let Access deny the case apps.

Answer

Create an NSX-T Distributed Firewall deny for all court VLANs until every laptop is patched

Answer

Uninstall Carbon Black Cloud sensors from non-patched devices so they fail a network check

Answer

Shorten the SAML certificate lifetime so unpatched devices cannot authenticate

Courts require that Windows devices missing a critical security patch lose SSO to case-management apps. How should the administrator enforce that?

Short Explanation

Full Explanation