topic Re: ISE Posture AV implementation in Network Access Control

ISE Posture AV implementation

LuigiDiFronzo9542 — Thu, 29 Feb 2024 19:20:49 GMT

I´d like to add a Posture assesment option for Windows Antivirus. I'd like to check that the AV on the Endpoint is installed and the AV version it has.

I've added the condition, remediation and the requirement rule, but when I'm going to add the Posture Policy, the created requirement doesn't appear. What I've been able to see is that the compliance Module for the AV is 3.x or lower.

What would be the correct procedure for this configuration?

Thanks.

Re: ISE Posture AV implementation

Rob Ingram — Thu, 29 Feb 2024 19:34:52 GMT

@LuigiDiFronzo9542 select "Anti-Malware" and from there select Vendor "Microsoft" and the specific product.

Re: ISE Posture AV implementation

LuigiDiFronzo9542 — Thu, 29 Feb 2024 19:45:02 GMT

Thanks Rob,

So to define a policy for Antivirus and another for AntiMalware, a single rule should be used for both with AntiMalware?

Re: ISE Posture AV implementation

Rob Ingram — Thu, 29 Feb 2024 19:48:49 GMT

@LuigiDiFronzo9542 if you are using the 4.x compliance module you must use Anti-Malware condition which contains the AV vendors.

Re: ISE Posture AV implementation

LuigiDiFronzo9542 — Thu, 29 Feb 2024 19:54:06 GMT

Great Rob, Thanks.