Question on Posture Remediation

Tze Tai Mak — Tue, 01 Nov 2016 23:34:00 GMT

Dear all,

My customer is asking if they can use ISE for posture assessment and enforce below.

-	Check local firewall status (or enable it if necessary)

Using WMI script? Do we have any sample script?

-	Disable wifi

Using WMI script? Any sample script?

-	Disable USB port completely (or allow read-only access to USB drive)

USB block in ISE 2.1. Could we allow read-only access?

-	Disable network drive mapping

unmount? run a registry key to disable file and print sharing?

-	Disable printing

Changing registry?

-	Disable remote access software say telnet, Putty, RDP, VNC, Teamviewer, pcAnywhere, Webex, Citrix GTM, etc.
How?
-	Firewall like policy that allow particular host access, e.g. proxy server access for Internet browsing

How?

Thanks, Tommy

Re: Question on Posture Remediation

hslai — Wed, 02 Nov 2016 19:12:58 GMT

I will redirect your inquiry to our SME on posture.