topic Re: Cannot see installed applications under context visibility for postured devices in Network Access Control

Cannot see installed applications under context visibility for postured devices

ckumar2 — Fri, 26 Jan 2018 22:33:57 GMT

Greetings,

I would like to confirm if we are hitting a bug or I am missing something. I tested ISE 2.3 and ISE 2.2. We have created simple application condition and posture check works fine, however, we go to context visibility, Endpoint and under "Application" we do not see any application for which endpoint passed application check. In my test, I created an application condition to check if FBMessenger_2_x is installed Posture report shows passed

I used latest AC posture compliance module and AC version 4.5.0304 and AC posture module 4.2.1331.0. I run posture update, no luck

Any assistance on this will be appreciated.

Regards,

Chandan

Re: Cannot see installed applications under context visibility for postured devices

paul — Fri, 26 Jan 2018 22:42:36 GMT

I think you need to use the application visibility condition and apply it to your posture rules. The one built into 2.3 for Windows is "Default_AppVis_Condition_Win". Add that to your posture rules and you should see applications. You can turn on persistent checking to in the posture settings.

Check this link out for more info:

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-22/210514-ISE-2-2-Client-Provisioning-and-Applicat.html

Re: Cannot see installed applications under context visibility for postured devices

ckumar2 — Sat, 27 Jan 2018 00:21:09 GMT

Thank you, Paul, it seems using default condition, I was able to see all application condition.

Appreciate your help.

Regards,

Chandan