topic Re: ISE with SCCM integration in Network Access Control

ISE with SCCM integration

manofal — Wed, 21 Aug 2019 11:17:43 GMT

Salam all,

Looking for best practice to use ISE with SCCM (as MDM) to check windows patches on user’s PCs.

The customer requirement is to identify whether the machine is compliant or not to allow/block network access based on this decision.

Which attributes are best for the ISE to poll form the SCCM?

we've tried the attributes in the below link, but there was a 20 minutes delay on the SCCM to update the pc status to compliant. This will result in a 20 min+ delay after the PC update itself and still not able to connect.

https://community.cisco.com/t5/security-documents/how-to-integrate-cisco-ise-with-microsoft-sccm-for-patch/ta-p/3725035#toc-hId--563478977

Any help will be highly appreciated.

Re: ISE with SCCM integration

hslai — Tue, 03 Sep 2019 17:50:43 GMT

In case you are still looking for a solution, please connect with Nidhi directly.

Re: ISE with SCCM integration

manofal — Wed, 04 Sep 2019 14:43:36 GMT

Which Nidhi?

Re: ISE with SCCM integration

Nidhi — Wed, 04 Sep 2019 15:33:31 GMT

please send me an invite nidpande@cisco.com and let us discuss this use case offline