[Cisco ISE] Remediation with Windows Update Agent (WUA)

[LKL4]

Hello team,

We have a customer who doesn't have WSUS and would like to check for critical windows patches.

I'm doing a check through the WUA (windows update agent). But, this flow is not working well, because AnyConnect takes a long time to check and sometimes it doesn't even finish. Has anyone used the windows update agent (WUA) with ISE posture?

Attached are my condition and remediation rules for WUA.

[Marcelo Morais]

Hi @LKL4 ,

 to help you with " ... AC takes a long time to check ... " please double check the Administration > System > Settings > Posture > General Settings > Remediation Timer (range from 1 to 300 min)

Hope this helps !!!