topic Re: Cisco ISE Posture check for Anti-Virus/Anti-Malware installed and running in Network Access Control

Cisco ISE Posture check for Anti-Virus/Anti-Malware installed and running

dvan — Fri, 21 Feb 2020 19:03:47 GMT

Hi,

Just wanting some confirmation whether it is possible in ISE 2.x to have an ISE posture check for any anti-virus/anti/malware installed and running on a supported endpoint with AnyConnect ISE Posture module?

The inbuild conditions in ISE can check for AV/AM installed and definition check however dont see any option to see if it is running/enabled... Have tried using an application condition (provision by category) with application state 'Installed' and 'Running' checked, however this just seems to collect application information rather than act as a posture check itself, and doesnt allow a remedation action to be set.

This is for AnyConnect VPN users.

Thanks,

dvan

Re: Cisco ISE Posture check for Anti-Virus/Anti-Malware installed and running

hslai — Thu, 28 Mar 2019 16:35:23 GMT

Please try the application visibility condition, which is introduced in ISE 2.2 Posture Enhancements. This works with AnyConnect ISE posture module and compliance module so please check the compatibility info at cs.co/ise-compatibility

Also, review ISE Posture Prescriptive Deployment Guide > Application Condition.

Re: Cisco ISE Posture check for Anti-Virus/Anti-Malware installed and running

Dranik — Wed, 08 May 2019 20:39:13 GMT

Did anyone found how to make it work? Thanks,

Re: Cisco ISE Posture check for Anti-Virus/Anti-Malware installed and running

hslai — Sun, 12 May 2019 05:59:55 GMT