In our ISE installs we use a custom NDG called Stage to allow us to move from monitor mode to authentication mode on a wired deployment. This custom NDG works perfect in this scenario. The issue with custom NDGs is for some reason ISE doesn't let you utilize these NDGs in all all places. The classic example is in the posturing rules. If you try to specify a device condition the only options you have are Type and Location. The custom NDGs don't show up.
When we roll out posturing we want the option to the same type of a roll out, i.e. have the compliance set to monitor initially then mandatory. If the custom NDGs were supported in the posturing rules we could use them to easily create a monitoring and enforced rule base.
Has this been discussed as a road map item?
Thanks.
