Cisco ISE to check Windows Firewall is enabled or not in Posture Requirement.

[Tabish Mirza]

I have already a running setup for wireless employees. Everything is working fine. Wireless Employees authenticate by AD through ISE. URL redirection is working fine. Posture requirements to check Hotfixs & AV installation & definition is working fine. Now I have new requirement to check whether Window firewall is enabled or not, if not then put the users in temporary access & do the remediation, if failed then put the user in noncompliant.

I want to know under which option i can create Window Firewall requirement.

Thanks

[Eduardo Aliaga]

Windows Firewall in Windows XP creates  a registry key

Registry Key:
HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile

Registry Value:
EnableFirewall

If the XP Firewall is on the Value will be = to “1”

The following link shows how to tell if firewalls of different brands are running

http://cisconac.blogspot.com/2007/05/custom-checks-personal-firewall.html

So, the ISE config will be something like the following picture. Please rate if it helps