Hey folks, hitting a bit of a wall with Netskope's posture checks and hoping someone has run this down before.
I'm trying to enforce encrypted disk checks on our Linux fleet (primarily Ubuntu 22.04, some RHEL). The policy is set up in the Netskope UI, targeting Linux, requiring encryption. But the clients keep reporting a `FAIL` with a generic "Disk encryption check failed" message, even on systems with full-disk encryption (LUKS) enabled and unlocked. The clients connect fine otherwise.
Here's what I've tried/verified:
* Confirmed the disk is encrypted with `sudo cryptsetup status /dev/mapper/ubuntu--vg-root`.
* Checked that the `nsd` agent is running with appropriate privileges.
* Reviewed the client logs (`/var/log/netskope/client.log`). The relevant snippet shows:
```bash
[posture_check_engine] ERROR - Failed to evaluate condition for disk_encryption: Unable to retrieve encryption status.
```
* There's no detailed error in the UI about *why* it failed.
My gut says the agent might be looking for a specific file, command output, or status that isn't present in our configuration. Has anyone successfully gotten this check to pass on Linux? If so:
* Which encryption method are you using?
* Did you need to adjust any client configuration?
* Are there known required packages (like `util-linux` for `lsblk` output)?
I love the idea of using posture checks for conditional access to internal tools, but this one has me stuck. Any debugging tips or config snippets would be awesome.