topic Re: ISE 2.3 launch program remediation error in Network Access Control

ISE 2.3 launch program remediation error

Madura Malwatte — Tue, 29 Jan 2019 22:27:04 GMT

ISE 2.3 patch 5

I have a launch program remediation configured which specifies a system_32 installation path to run a vbs script. The script just tells SCCM to push down an Anti-Malware software. However when remediating it fails with the following error below.

Am I using the right method to run a vbs script as remediation?

Re: ISE 2.3 launch program remediation error

howon — Mon, 04 Feb 2019 16:18:00 GMT

If file name is correct, the AnyConnect DART bundle should provide hints on what the issue may be. Suggest going through the flow and collect DART and look at the posture module logs for more information.

Re: ISE 2.3 launch program remediation error

Madura Malwatte — Tue, 12 Feb 2019 13:45:45 GMT

Ok so it seems ISE doesn't like launch program remediation where if the application is in c:\windows\system32 folder and if you configure ABSOLUTE option and put the full path in for program executable and program parameters it doesn't work.

I switched it to SYSTEM32 option and put in the program executable and parameters as just the file name without the path and it works.

Not sure if this is expected behaviour?

Note: My application and parameters file is in the c:\windows\system32 folder.

Oh and the aciseposture log file in dart bundle is encrypted, is there a way for us to decrypt it?

Re: ISE 2.3 launch program remediation error

hslai — Tue, 12 Feb 2019 15:19:04 GMT

Please open a TAC case and submit the DART file to TAC. TAC has a tool to decipher the aciseposture log file.