topic Re: Cisco ISE integrating with Microsoft SCCM in Network Access Control

Cisco ISE integrating with Microsoft SCCM

benjamin-banks1 — Fri, 15 Apr 2016 21:21:21 GMT

Has Cisco published something on how the integration of ISE 2.0 into SCCM works regarding patch management? I am trying to deploy this type of solution but struggling to get my head around how ISE and the SCCM client talk to each other. More specifically, I am tyring to understand how SCCM collections are built to only install the required patches that are causing the AnyConnect client to fail the posture assessment in ISE.

Re: Cisco ISE integrating with Microsoft SCCM

hslai — Sat, 16 Apr 2016 03:25:41 GMT

I've forwarded your inquiry to our SME on this. He will post a response early next week.

Re: Cisco ISE integrating with Microsoft SCCM

soupanda — Tue, 19 Apr 2016 23:10:30 GMT

Hello Benjamin,

please find attached a reference document on AnyConnect and SCCM client integration, hope you find it helpful.

The integration to detect and remediate missing patches has been done at the AnyConnect client, where ISEPosture client / 'System Scan' , has the ability to query the SCCM client for a list of all missing patches.If the patches in the missing patch list are CRITICAL in severity, AnyConnect ISEPosture client can then force SCCM client to download and install all missing critical patches before letting network access.

-Soumya Panda

Re: Cisco ISE integrating with Microsoft SCCM

benjamin-banks1 — Wed, 20 Apr 2016 14:05:23 GMT

I very much appreciate the attachment. That is exactly what I was needing and has proven very helpful. Thank you very much!

Re: Cisco ISE integrating with Microsoft SCCM

nikhilcherian — Thu, 03 Nov 2016 10:52:57 GMT

Excellent document, thanks for sharing!!

I can see a line in the document which says "Create a requirement from the condition and remediation action created". Can I create a remediation action for automatic install of the pending patch

Regards

Nikhil

Re: Cisco ISE integrating with Microsoft SCCM

nolanrumble — Tue, 20 Jun 2017 16:27:16 GMT

Hi,

I was just wondering if there's a newer version of this SCCM reference guide for ISE versions 2.0 and greater as well as AnyConnect 4.2 and greater? If not, does this document still apply to the newer versions of ISE (2.0 and onward) and AnyConnect (4.2 and onward)?

Thanks

Nolan