topic Re: WSUS with ISE Posture in Network Access Control

WSUS with ISE Posture

MohamedYahiaBACCAR — Fri, 03 Jan 2020 15:17:02 GMT

Greetings,

Can anyone tell me how to implement an ISE WSUS posture that will check if the last update date of a windows workstation is less than two months.

Thanks.

Re: WSUS with ISE Posture

balaji.bandi — Fri, 03 Jan 2020 15:29:14 GMT

here is deployment case :

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/119214-configure-ise-00.html

I do not belive it has option(nor i have seen that 2months old), you can make condition for for the critical patches applied as per security requirement.

Other way you can run the script to check when when was the last time it has updated (i have not done, just my suggestion).

Re: WSUS with ISE Posture

Jason Kunst — Fri, 03 Jan 2020 21:27:56 GMT

have you looked at the ise posture guide?
https://community.cisco.com/t5/security-documents/ise-posture-prescriptive-deployment-guide/ta-p/3680273

You're right there is no way to get more granular than that. I have tagged our SME @Timothy Abbott