ISE SCCM check always show as passed

[Attila Horvath]

Hi, 

We have a posture rule  to check installed critical patches at SCCM system.

I have set SCCM check based on ISA admin guide and based on this guide

https://community.cisco.com/t5/security-documents/how-to-integrate-cisco-ise-with-microsoft-sccm-for-patch/ta-p/3725035

The computer shows there is a missing critical patch, and shows the small icon notification also (the are misising patches), but the posture riport shows as passed all the time.

What's wrong with it? The anyconnect is the latest 4.7.02036, the compliance module is 4.3.512.6144

The sccm is ver 5.0.

Any suggestion?

[hslai · Accepted solution]

If not already done, please use Cisco Diagnostic and Reporting Tool (DART) to generate a support bundle and submit it to Cisco TAC to troubleshoot.