cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
901
Views
0
Helpful
1
Replies

Question on Posture Remediation

Tze Tai Mak
Level 1
Level 1

Dear all,

My customer is asking if they can use ISE for posture assessment and enforce below.

-      Check  local firewall status (or enable it if necessary)

Using WMI script? Do we have any sample script?

-      Disable wifi

Using WMI script? Any sample script?

-      Disable USB port completely (or allow read-only access to USB drive)

USB block in ISE 2.1. Could we allow read-only access?

-      Disable network drive mapping

unmount? run a registry key to disable file and print sharing?

-      Disable printing

Changing registry?

-      Disable remote access software say telnet, Putty, RDP, VNC, Teamviewer, pcAnywhere, Webex, Citrix GTM, etc.
How?
-      Firewall like policy that allow particular host access, e.g. proxy server access for Internet browsing

How?

Thanks, Tommy

1 Reply 1

hslai
Cisco Employee
Cisco Employee

I will redirect your inquiry to our SME on posture.