topic Cisco ISE to check Windows Firewall is enabled or not in Posture in Network Access Control

Cisco ISE to check Windows Firewall is enabled or not in Posture Requirement.

Tabish Mirza — Mon, 11 Mar 2019 02:05:59 GMT

I have already a running setup for wireless employees. Everything is working fine. Wireless Employees authenticate by AD through ISE. URL redirection is working fine. Posture requirements to check Hotfixs & AV installation & definition is working fine. Now I have new requirement to check whether Window firewall is enabled or not, if not then put the users in temporary access & do the remediation, if failed then put the user in noncompliant.

I want to know under which option i can create Window Firewall requirement.

Thanks

Cisco ISE to check Windows Firewall is enabled or not in Posture

Eduardo Aliaga — Sat, 19 May 2012 06:35:56 GMT

Windows Firewall in Windows XP creates a registry key

Registry Key:
HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile

Registry Value:
EnableFirewall

If the XP Firewall is on the Value will be = to “1”

The following link shows how to tell if firewalls of different brands are running

http://cisconac.blogspot.com/2007/05/custom-checks-personal-firewall.html

So, the ISE config will be something like the following picture. Please rate if it helps