diff --git a/management/server/types/account.go b/management/server/types/account.go index b36b719e4..e917e91c3 100644 --- a/management/server/types/account.go +++ b/management/server/types/account.go @@ -1320,6 +1320,12 @@ func (a *Account) GetNetworkResourcesRoutesToSync(ctx context.Context, peerID st } for _, policy := range resourcePolicies[resource.ID] { + // validate the peer based on policy posture checks applied + isValid := a.validatePostureChecksOnPeer(ctx, policy.SourcePostureChecks, peerID) + if !isValid { + continue + } + for _, sourceGroup := range policy.SourceGroups() { group := a.GetGroup(sourceGroup) if group == nil {