cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1228
Views
0
Helpful
1
Replies

ISE 2.2 Anti-Malware Conditions - Compound?

BRANDON PORTER
Level 1
Level 1

Within our production policy for sanctioned wireless we have existing anti-malware conditions that check to make sure Symantec Endpoint Protection version 12.x is installed and that virus definitions have been updated within the last 45 days.

 

Our desktop team is testing Symantec Endpoint Protection version 14.x and we need to "add" this new version to our existing anti-malware conditions check for their testing. When they try to join the sanctioned wireless network on laptops running Symantec Endpoint Protection 14.x they fail the conditions check and are redirected to a guest wireless network.

 

My question is can I just check the Symantec Endpoint Protection version 14.x box in the existing condition for both SEP_Installed and SEP_Updated (see attachment)?

 

When multiple anti-malware products are "checked" or selected within an anti-malware condition does ISE check to see if SEP 12.x OR SEP 14.x is installed?

 

Just want to confirm that when selecting multiple products within an anti-malware condition checks to see if ANY of the selected versions is installed.

 

 

1 Accepted Solution

Accepted Solutions

Ben Walters
Level 3
Level 3

You are correct in that ISE will allow for any AV version that you have included in the AV check.

View solution in original post

1 Reply 1

Ben Walters
Level 3
Level 3

You are correct in that ISE will allow for any AV version that you have included in the AV check.