topic Re: Posture - File Check in Network Access Control

Posture - File Check

wileong — Tue, 25 Sep 2018 15:39:24 GMT

Hi,

I am creating a "File Condition" requirement and facing unexpected behaviour.

I am using "FileExistense" in "User_Profile" for Windows 10. By the default, Windows user profiles directory is C:\Users\%username%, where %username% is the username of the current logon user.

Which folder is "User_Profile" being reference during ISE posture? I have also tried "User_Desktop" without luck too.

Thanks

Wing Churn

Re: Posture - File Check

howon — Tue, 25 Sep 2018 16:25:16 GMT

'User_Profile' will put you in the C:\Users\%username% (Assuming C: is the system drive). From there you can add '\Desktop\test.txt' if you want to look for 'test.txt' file on the desktop.

Re: Posture - File Check

wileong — Wed, 26 Sep 2018 01:01:48 GMT

Hi Hosuk,

I have tried putting in \test.txt and test.txt without luck. The full path of the file is c:\users\%username%\text.txt. Anything i should be checking?

Thanks

Wing Churn

Re: Posture - File Check

howon — Wed, 26 Sep 2018 02:28:38 GMT

I would check the posture policy starting from the condition > requirement > posture policy to make sure it is setup correctly. Check out the posture report to see if your requirement is being checked for the user. The condition like the following should work for your test:

Also, I suggest going through the posture deployment guide:

https://community.cisco.com/t5/security-documents/ise-posture-deployment-guide/ta-p/3680273

Re: Posture - File Check

howon — Wed, 26 Sep 2018 02:41:57 GMT

By the way, I just noticed that your example shows 'test.txt', but your file name is 'text.txt' (Notice the 's' vs. 'x'). Can you check the spelling of the file?

Re: Posture - File Check

wileong — Mon, 01 Oct 2018 06:44:36 GMT

Hi Hosuk,

Thanks for the info, test.txt is just an example. I have tested in the lab and it works, previous issue was Windows UAC.

Thanks

Wing Churn