topic Re: Uploading Antivirus / security packages to ISE for clients to download. in Network Access Control

Uploading Antivirus / security packages to ISE for clients to download.

n-russell-biggie — Fri, 18 Jan 2019 08:47:29 GMT

Hello,

I am struggling to create posture and client provisioning on ISE 2.4.

I have configured posture that checks for a simple file condition on the clients laptops / workstations and this works fine.

I would like to test posture to check that Microsoft Security Essentials installation is present on client and if not for client to be redirected to ISE to download the package. The issue is that I can not find where to upload the MS Security essentials package to on ISE. I tried to upload to the resources section in client provisioning on ISE but it seems that I can only upload anyconnect packages etc.

Any help would be much appreciated.

Thanks

Nick

Re: Uploading Antivirus / security packages to ISE for clients to download.

ma.alsaffar — Sun, 20 Jan 2019 08:32:33 GMT

Hi,

I do not know if there is an option to upload package to ISE to allow enduser to download it. However, one trick we used is to choose remediation action as message only when the posture failed, you can enter URL link created internally and allow all users to have access to it so whenever posture of AV installation failed, a message like this will shown:

MS essenital is not installed in your PC,

please download the following and try again:

https://10.10.10.10/MsEssential.msi

Regards,

Re: Uploading Antivirus / security packages to ISE for clients to download.

Jason Kunst — Sun, 20 Jan 2019 23:09:05 GMT

File remediation

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_011110.html#reference_F304C79D82674621A0CBAEBED45066D9

Re: Uploading Antivirus / security packages to ISE for clients to download.

Nidhi — Mon, 21 Jan 2019 06:30:43 GMT

A common practice used by many customers is to provide a link to download and install the package. since installation is a manual process.

Re: Uploading Antivirus / security packages to ISE for clients to download.

n-russell-biggie — Mon, 21 Jan 2019 07:21:15 GMT

Many thanks. This works.