https://community.cisco.com/t5/network-access-control/ise-posture-bluekeep/m-p/3958366#M455662 <P>Hi&nbsp;<a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/264133">@carlos.ibarra</a>&nbsp;,</P> <P>&nbsp;</P> <P>Yes, ISE can check for windows patches. Look for conditions under Work Centers -&gt; Posture -&gt; Policy Elements -&gt; Patch Management. This can check the windows patches installed, through SCCM, Intune, Windows Update Agent. You can then configure Remediation for the machines missing patches.</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="PatchManagement.png" style="width: 999px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/49368i3BCA02C87CE890E1/image-size/large?v=v2&amp;px=999" role="button" title="PatchManagement.png" alt="PatchManagement.png" /></span></P> <P>If you happen to use SCCM, there is a fantastic&nbsp;<A href="https://community.cisco.com/t5/security-documents/how-to-integrate-cisco-ise-with-microsoft-sccm-for-patch/ta-p/3725035#toc-hId--563478977" target="_blank" rel="noopener">guide</A>&nbsp;integrating SCCM with ISE.</P> Thu, 14 Nov 2019 04:43:44 GMT Anurag Sharma 2019-11-14T04:43:44Z https://community.cisco.com/t5/network-access-control/ise-posture-bluekeep/m-p/3958229#M455659 <P>Is there any way that through the ISE postures to verify if the windows are fitted with the patches to avoid bluekeep?</P> Wed, 13 Nov 2019 20:35:13 GMT https://community.cisco.com/t5/network-access-control/ise-posture-bluekeep/m-p/3958229#M455659 carlos.ibarra 2019-11-13T20:35:13Z https://community.cisco.com/t5/network-access-control/ise-posture-bluekeep/m-p/3958366#M455662 <P>Hi&nbsp;<a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/264133">@carlos.ibarra</a>&nbsp;,</P> <P>&nbsp;</P> <P>Yes, ISE can check for windows patches. Look for conditions under Work Centers -&gt; Posture -&gt; Policy Elements -&gt; Patch Management. This can check the windows patches installed, through SCCM, Intune, Windows Update Agent. You can then configure Remediation for the machines missing patches.</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="PatchManagement.png" style="width: 999px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/49368i3BCA02C87CE890E1/image-size/large?v=v2&amp;px=999" role="button" title="PatchManagement.png" alt="PatchManagement.png" /></span></P> <P>If you happen to use SCCM, there is a fantastic&nbsp;<A href="https://community.cisco.com/t5/security-documents/how-to-integrate-cisco-ise-with-microsoft-sccm-for-patch/ta-p/3725035#toc-hId--563478977" target="_blank" rel="noopener">guide</A>&nbsp;integrating SCCM with ISE.</P> Thu, 14 Nov 2019 04:43:44 GMT https://community.cisco.com/t5/network-access-control/ise-posture-bluekeep/m-p/3958366#M455662 Anurag Sharma 2019-11-14T04:43:44Z