Add a device posture policy
OpenVPN Connect shares device attributes with CloudConnexa when establishing a tunnel and periodically during the session. You can configure a device posture policy to evaluate this information and determine whether a device is allowed to connect or remain connected.
Minimum client versions for device posture
Device Posture policies require OpenVPN Connect (or OpenVPN3 Client for Linux) versions equal to or higher than the following:
Windows: OpenVPN Connect 3.5.1
macOS: OpenVPN Connect 3.5.1
Linux: OpenVPN3 Client v_23
Requires additional packages:
openvpn3-addon-devpostureopenvpn3-dpc-openvpninc
Refer to Tutorial: Enable device posture check for Linux OpenVPN client.
iOS: OpenVPN Connect 3.5
Android: OpenVPN Connect 3.5
Add a device posture policy
To add a device posture policy, follow the steps below:
Sign in to your WPC's Administration portal by entering your Cloud ID in a web browser (for example,
company_name.openvpn.com).Click Users > Device Posture.
Click Add Policy.
In the Policy Details:
Enter a Name.
(Optional) Enter a Description.
In the Apply To section:
Select one or more User Groups to which the policy will apply.
You may skip this step and assign User Groups later.
In the Configuration section:
You will see separate policy blocks for Windows, macOS, Linux, Android/ChromeOS, and iOS.
All are enabled (ON) by default.
To block connections from devices running a specific operating system, turn the corresponding policy block to OFF.
To add a posture check:
Select a check from the drop-down list within the appropriate operating system block.
Configure the condition that must be met.
Click Add another check to include additional requirements.
Click Add Policy to save the configuration.