https://community.cisco.com/t5/network-access-control/ise-posture-bluekeep/m-p/3958388#M455771 You should be able to approach this a couple ways. You could check for the presence of a file if you know what the fix includes. An alternative would be to build a simple check for the existence of a registry key assuming the KB4499175 that fixes bluekeep generates one. <BR /><BR />The challenge that might exist is if the fix for Bluekeep is found in multiple KB's. KB4499175 is specifically the security only KB. Thu, 14 Nov 2019 06:04:27 GMT Damien Miller 2019-11-14T06:04:27Z https://community.cisco.com/t5/network-access-control/ise-posture-bluekeep/m-p/3958228#M455669 <P>Is there any way that through the ISE postures to verify if the windows are fitted with the patches to avoid bluekeep?</P> Wed, 13 Nov 2019 20:32:33 GMT https://community.cisco.com/t5/network-access-control/ise-posture-bluekeep/m-p/3958228#M455669 carlos.ibarra 2019-11-13T20:32:33Z https://community.cisco.com/t5/network-access-control/ise-posture-bluekeep/m-p/3958388#M455771 You should be able to approach this a couple ways. You could check for the presence of a file if you know what the fix includes. An alternative would be to build a simple check for the existence of a registry key assuming the KB4499175 that fixes bluekeep generates one. <BR /><BR />The challenge that might exist is if the fix for Bluekeep is found in multiple KB's. KB4499175 is specifically the security only KB. Thu, 14 Nov 2019 06:04:27 GMT https://community.cisco.com/t5/network-access-control/ise-posture-bluekeep/m-p/3958388#M455771 Damien Miller 2019-11-14T06:04:27Z