topic Thanks Aaron. I was looking in Network Access Control

ISE Rules

sqambera — Mon, 11 Mar 2019 06:17:47 GMT

Hello,

Could anyone please look at the attached requirement diagram. The Cisco ISE needs to be configured accordingly. Do I have to create Authorization rules for achieving these results? I am wondering that under Authorization conditions in ISE where could I find things like (I am trying to figure out) "windows service pack equal 1", "operating system equals windows 7", etc.

Or is it somewhere else that I need to look for configuring these requirements? Does this needs to be done under Posture rules?

Thanks in advance for all your help.

Regards,

Qamber

Hi,

Aaron Castro Sanchez — Sat, 05 Dec 2015 08:24:21 GMT

Hi,

Not exactly. Not all the requirements you ask and the flow you want to get will be done only with Authorization rules.

You'll need to use authentication and authorization rules, plus provisioning and posture rules and checks.

Your flow is something similar to what I desgined in my company, the only thing you don't have in yours is the BYOD side.

Cheers,

Thanks Aaron. I was looking

sqambera — Sun, 06 Dec 2015 16:37:10 GMT

Thanks Aaron. I was looking at the posture conditions in ISE but wasn't able find any that says if service pack is equal to something. Do you have any idea about it? Its one of the requirement as per attached diagram.

You have to create a posture

Aaron Castro Sanchez — Sun, 06 Dec 2015 17:29:15 GMT

You have to create a posture result condition that would be something like:

If OS equals "any" met if "posture condition" else "remediation action".

Most OS should be already there.

Posture conditions come pre loaded, so you only have to select i.e. pc_W7_SP1_int.

Same for remediation, many come created, or you can create new ones as well.

Once you have the posture requirements rules, then you can create the policy so if an identity group matches the OS then the requirement will be the one you created as a rule.

Thanks Aaron for helping out.

sqambera — Wed, 09 Dec 2015 04:09:35 GMT

Thanks Aaron for helping out.

Hi Community,

Bob Goal — Wed, 23 Nov 2016 11:41:08 GMT

Hi Community,

could you help me configure posture to check for operating system version? I want to allow access only for Windows 7 and Windows 10. Other Windows version should be rejected.