01-04-2017 10:40 AM
I believe there is a schedule report that can be run ie: posture assessment by endpoint and there is notification send whe the report is executed.
The question is is there a way to be immediately notified if an endpoint fails posture checks by ISE ? And if so what information is contained in the alert and what type of alert is provided by ise ?
I suspect there may be a way that some siem may be able to provide this type of alert .. looking for native to ise.
Solved! Go to Solution.
01-04-2017 11:46 PM
ISE does support email notification and you can find tab in the Alarm Settings section as a tab.
For complete alarm list you can look at the Alarm configuration tab. AFAIK we do not have an alarm for posture failure. Please work with your Cisco SE to open an enhancement if there is a need for it and let them know the context.
-Krishnan
01-04-2017 12:29 PM
All ISE Alerts can be seen by logging in to ISE and navigating to Administration > System > Settings > Alarm Settings. If the alarm you want is not there, then it cannot be done at this point.
01-04-2017 11:46 PM
ISE does support email notification and you can find tab in the Alarm Settings section as a tab.
For complete alarm list you can look at the Alarm configuration tab. AFAIK we do not have an alarm for posture failure. Please work with your Cisco SE to open an enhancement if there is a need for it and let them know the context.
-Krishnan
02-22-2019 06:33 AM
It appears that you can only select one of the pre-canned alarms in ISE....is there a way to select multiple alarms to send email alerts on?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide