Haven't tried, but can't you based on the SystemServices:GracePeriodValid = True trigger an Agent Enforcement that displays a message (and Bounce Client = False)?
The idea of Grace Period, which is quite new, is that it allows security agents running on the client to update, without interrupting the end-user.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Mar 18, 2025 06:29 AM
From: Prasadbhosale
Subject: Grace period for unhealthy client
Hi All,
Need your support to create new policy which state that grace period is applied to your device.
When any device failed to validate the predefined posture parameter it goes into unhealthy state as per the policy Quarantine profile tagged to that client. To overcome this issue, we have updated the grace period in the posture policy, but now we made the change the client and make it as unhealthy the grace period is applied also healthy profile also tagged but we didn't get any update that grace period has applied for that client.
If we disable the service from the client machine the grace period is applied, we want to notify that client that grace period is applied to your device, but after complting the grace agent notify that your machine is unhealthy, and quarantine profile tagged.
Here are some snaps for the reference.
------------------------------
Prasad Bhosale
------------------------------