SCCM remediation ISE 2.2 patch 1

[nikhilcherian]

Hi All,

I am trying to create a posture condition, to check for any critical patches not installed in the SCCM client.I went through the below docs for the setting this up.

How to Integrate Microsoft SCCM with ISE 2.1 Presentation

Cisco ISE and SCCM integration Reference Guide

I am using anyconnect 4.5 & SCCM 5.X version. I could successfully check for the SCCM installed & Enabled conditions.. However when I select my condition to check for upto date installation for critical update ( as shown in the attachment), it is failing. I am using windows 7 enterprise PC for testing

I tried with remediation action as both message text only & also automatic update, both made my posture validation fail, even though there were no missing critical patch in my test PC.

Let me know if any one has come across similar issues

Regards

Nikhil

[ldanny · Accepted solution]

I recommend you reach out to TAC for troubleshoot this further.

[nikhilcherian]

I have already opened a TAC for the issue, but I heard a negative feedback on this from few of my friends who tried this feature. I wanted to hear from a wider audience if they could figure out any work arounds

[Bcssi Network]

What is the error message that your are getting on the AnyConnect client side? can you post screenshot or the error?

[nikhilcherian]

I get the message posture validation failure, I don't have a screenshot of this, I can put it tomorrow

Regards

Nikhil