cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

790
Views
0
Helpful
11
Replies
Highlighted
Beginner

Cisco ISE 1.2.x with Posture Configuration - Windows Patches

Hi, Anybody has any experience in integrating Cisco ISE Posture with Microsoft SCCM?

With WSUS this works fine, but with SCCM I don't have any idea how to proceed. Anybody knows what it's included in the predefined rules

pr_WSUSRule and pr_WSUSCheck? I can't find any information in ISE Console or Cisco documentation.

 

Thanks.

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

Once agent performs the posture checks containing the windows hotfix checks, if the administrator configured the Launch Program Posture Remediation , agent will launch the script file which will initiate the windows hotfix updates via SCCM client configuration manager pre-installed/pre-configured on the box.

View solution in original post

11 REPLIES 11
Highlighted
Cisco Employee

Once agent performs the posture checks containing the windows hotfix checks, if the administrator configured the Launch Program Posture Remediation , agent will launch the script file which will initiate the windows hotfix updates via SCCM client configuration manager pre-installed/pre-configured on the box.

View solution in original post

Highlighted

I will try this configuration.

 

 

Thanks,

 

 

Highlighted

Hi, Mafiaboy,

Are you using the NAC Agent to posture the workstation ?  I have read somewhere for now the NAC Agent only support WSUS. I have opened a TAC case.  Also, have you tried the configuration mentioned above.  Did it solve your issue ?

Thanks !

Tony

 

Highlighted

Hi tonyp8581,

Did you get any update from TAC? As I am also facing same issue with SCCM , Windows Posture Remedation is not working 

 

Regards

 

 

Highlighted

Hi Gade,

I met Cisco Rep. a couple of weeks ago and said SCCM support will be introduced in a later release.  For now, he had no official date.

If I have more information, I will definitely post it.

Regards !

Tony

 

 

Highlighted

Most probably on ISE 2.0, but not official date yet.

 

Rergards,

 

Erlan

Highlighted

Thanks for the info Erlan,

Tony

 

Highlighted

Hi All,

Now SCCM is supported on ISE 1.4, see the attached screen.

Highlighted

Hi, pemasirid,

In your screen shot, SCCM is clearly shown.  But it's strange, i just went through the Release notes v1.4 and there's no mention of SCCM in the new features section.

I'm curious, do you have v1.4 in production ? If yes, is SCCM working correctly ?

Thanks !

Tony

 

 

Highlighted

Hi Tony,

Seems they forgotten to include in release note and I have raised the same with Cisco, they said they will create document bug on this and may include later.

I did upgrade on lab setup and did some R&D but seems need to know proper procedure and process etc before implement on production.

Thanks

Highlighted

Thanks for the update pemasirid !

I will definitely check it myself.  Cheers !