---
title: Configuring Device Posture Profile in Zscaler Private Access (ZPA)
description: Device posture profiles in ZPA help ensure that only compliant devices can access internal applications. A posture profile evaluates device attributes such as OS version, security software status, dis
---

[Skip to content](https://securedynamics.net/kb/configuring-device-posture-profile-in-zscaler-private-access-zpa#main-content)

English

Show submenu for translations

![SecureDynamics Zscaler Logo](https://securedynamics.net/hs-fs/hubfs/SecureDynamics%20Logo%20Dark-1.png?width=1250&height=296&name=SecureDynamics%20Logo%20Dark-1.png)

Open main navigation

Close main navigation

- English
  
  Show submenu for translations
- Go to securedynamics.net

 Go to securedynamics.net

 Hello. How can we help you?

- There are no suggestions because the search field is empty.

1. [SecureDynamics Knowledge Base](https://securedynamics.net/kb?hsLang=en)
2. [Support](https://securedynamics.net/kb/support?hsLang=en)

# Configuring Device Posture Profile in Zscaler Private Access (ZPA)

#### **Overview**

Device posture profiles in ZPA help ensure that only compliant devices can access internal applications. A posture profile evaluates device attributes such as OS version, security software status, disk encryption, or custom checks before granting access. This article explains how to configure a posture profile in the ZPA Admin Portal.

Learn more about device posture profiles here [Device Posture](https://help.zscaler.com/zscaler-client-connector/about-device-posture-profiles)

 

**Below are the steps to configure device posture profile**

#### **Step 1: Add Device Posture Checks**

1. Click Add Device Posture to define posture checks.
2. Choose the platform(Windows, MAC, Linux, Android, ios)
3. Choose a Posture Type from the available options, below are the few examples:  
     - **OS Version:** Ensure devices run on approved operating systems or minimum patch levels.
     - **Firewall:** Validate that a firewall is enabled.
     - **Disk Encryption:** Require BitLocker, FileVault, or other encryption enabled.
     - **Antivirus/EDR:** Check for the presence and active status of supported security software.
     - **Certificate:** Verify device certificate for corporate-managed devices.
     - **Custom Checks:** Use registry paths, processes, or scripts for specialized requirements.
4. Configure rule parameters (e.g., minimum OS version, encryption type).
5. Save the rule.

![](https://securedynamics.net/hs-fs/hubfs/undefined-4.png?width=688&height=810&name=undefined-4.png)

### **Step 2: Configure access policy and enforce ZCC posture profile**

The access policy rules enable you to implement role based access controls. You can configure an access policy that checks for posture verification and blocks the service if the verification is failed. To configure follow below steps

- Go to Policy → Access Policies.
- Add an access policy.
- Under Conditions, add the newly created Posture Profile and configure values as below screenshot
- Save and activate the policy.

![](https://securedynamics.net/hs-fs/hubfs/undefined-Sep-05-2025-11-31-29-3381-AM.png?width=688&height=610&name=undefined-Sep-05-2025-11-31-29-3381-AM.png)

### Conclusion

 When the user is denied access based on the configured device posture profile, the message configured in the access policy is displayed.

- [FAQs](https://securedynamics.net/kb/faqs?hsLang=en)
- [Troubleshooting](https://securedynamics.net/kb/troubleshooting?hsLang=en#main-content)

    - [Client Connector Portal](https://securedynamics.net/kb/troubleshooting?hsLang=en#client-connector-portal)
    - [Zscaler Client Connector](https://securedynamics.net/kb/troubleshooting?hsLang=en#zscaler-client-connector)
- [Support](https://securedynamics.net/kb/support?hsLang=en)
- [SecureDynamics Internal](https://securedynamics.net/kb/securedynamics-internal?hsLang=en)
- [Licensing](https://securedynamics.net/kb/licensing?hsLang=en#main-content)

    - [ZIA Upgrades](https://securedynamics.net/kb/licensing?hsLang=en#zia-upgrades)
- [Education & Training](https://securedynamics.net/kb/education-training?hsLang=en)
- [Delivery Services](https://securedynamics.net/kb/delivery-services?hsLang=en)
- [Partner Help](https://securedynamics.net/kb/partner-help?hsLang=en)

[![SecureDynamics Zscaler Logo](https://securedynamics.net/hs-fs/hubfs/SecureDynamics%20Logo%20Dark-1.png?width=1250&height=296&name=SecureDynamics%20Logo%20Dark-1.png "SecureDynamics Zscaler Logo")](https://cm360.securedynamics.net?hsLang=en)

securedynamics.net Help Center

Copyright © 2026, SecureDynamics

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://securedynamics.net/#organization",
  "@type" : "Organization",
  "address" : {
    "@type" : "PostalAddress",
    "addressCountry" : "US",
    "addressLocality" : "Santa Clara",
    "addressRegion" : "CA",
    "postalCode" : "95054",
    "streetAddress" : "5201 Great America Pkwy, Suite 320"
  },
  "logo" : {
    "@type" : "ImageObject",
    "url" : "https://securedynamics.net/hubfs/SecureDynamics%20Zscaler%20Logo-1.webp"
  },
  "name" : "SecureDynamics",
  "sameAs" : [ "https://www.linkedin.com/company/3626024/" ],
  "url" : "https://securedynamics.net/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://securedynamics.net/#website",
  "@type" : "WebSite",
  "inLanguage" : "en-US",
  "name" : "SecureDynamics",
  "potentialAction" : {
    "@type" : "SearchAction",
    "query-input" : "required name=search_term_string",
    "target" : {
      "@type" : "EntryPoint",
      "urlTemplate" : "https://securedynamics.net/hs-search-results?q={search_term_string}"
    }
  },
  "publisher" : {
    "@id" : "https://securedynamics.net/#organization"
  },
  "url" : "https://securedynamics.net/"
}
```