[Cisco ISE] Remediation with Windows Update Agent (WUA)

LKL4 — Wed, 08 Jun 2022 13:25:42 GMT

Hello team,

We have a customer who doesn't have WSUS and would like to check for critical windows patches.

I'm doing a check through the WUA (windows update agent). But, this flow is not working well, because AnyConnect takes a long time to check and sometimes it doesn't even finish. Has anyone used the windows update agent (WUA) with ISE posture?

Attached are my condition and remediation rules for WUA.

Re: [Cisco ISE] Remediation with Windows Update Agent (WUA)

Marcelo Morais — Thu, 07 Jul 2022 01:31:18 GMT

Hi @LKL4 ,

to help you with " ... AC takes a long time to check ... " please double check the Administration > System > Settings > Posture > General Settings > Remediation Timer (range from 1 to 300 min)

Hope this helps !!!

topic Re: [Cisco ISE] Remediation with Windows Update Agent (WUA) in Network Access Control

[Cisco ISE] Remediation with Windows Update Agent (WUA)

Re: [Cisco ISE] Remediation with Windows Update Agent (WUA)