topic Re: Microsoft Update Posturing in Network Access Control

Microsoft Update Posturing

zascherl86 — Wed, 16 Sep 2020 19:23:54 GMT

Is there any way to have ISE tell what patch fails on posturing for windows patching?

Mark Elsen — Thu, 17 Sep 2020 07:18:44 GMT

- Here's a bit of a related thread which may contain some hints :

zascherl86 — Thu, 17 Sep 2020 13:28:06 GMT

So this helps. Now I've heard 2 different ways it works.

1. ISE checks patch release versions against Microsoft to see if up to date.

2. ISE only checks to see if patches are required on the system and not necessarily the patch version.

Which one of those would be accurate?

thomas — Mon, 28 Sep 2020 02:19:27 GMT

No, ISE only says if the endpoint is Compliant or Non-compliant with your defined policy.