topic Re: ISE 3.1 linux application posture policy in Network Access Control

ISE 3.1 linux application posture policy

Joseph.F — Tue, 30 Aug 2022 11:42:31 GMT

Hello,

I'm trying to create a posture application condition for a Red Hat linux policy that looks for the puppet process to be running.

a ps -aux | grep puppet shows: path/puppet agent --no-daemonize

I've tried every variation of that process that i can think of but this compliance check fails on systems that are running this process. I have other application conditions that work as expected for Linux however those conditions don't have a space in the process name i.e. puppet agent. Anyone else have similar experiences? I would like to get this check working so it is consistent with the other operating systems posture policies.

Re: ISE 3.1 linux application posture policy

balaji.bandi — Tue, 30 Aug 2022 11:54:21 GMT

is the Linux running any connect client, what is the version of anyconnect client.

Re: ISE 3.1 linux application posture policy

Joseph.F — Tue, 30 Aug 2022 12:01:11 GMT

Yes we are running anyconnect. 4.10.3104

compliance module 4.3.1968.0

Re: ISE 3.1 linux application posture policy

Joseph.F — Fri, 02 Sep 2022 16:52:43 GMT

related question for the posture ise experts. What command does the compliance module run on the back end of the linux machine to determine running processes?