ISE Posture AV implementation

[LuigiDiFronzo9542]

I´d like to add a Posture assesment option for Windows Antivirus. I'd like to check that the AV on the Endpoint is installed and the AV version it has.

I've added the condition, remediation and the requirement rule, but when I'm going to add the Posture Policy, the created requirement doesn't appear. What I've been able to see is that the compliance Module for the AV is 3.x or lower.

What would be the correct procedure for this configuration?

Thanks.

[Rob Ingram]

@LuigiDiFronzo9542 select "Anti-Malware" and from there select Vendor "Microsoft" and the specific product.

[LuigiDiFronzo9542]

Thanks Rob,

So to define a policy for Antivirus and another for AntiMalware, a single rule should be used for both with AntiMalware?

[Rob Ingram · Accepted solution]

@LuigiDiFronzo9542 if you are using the 4.x compliance module you must use Anti-Malware condition which contains the AV vendors.

[LuigiDiFronzo9542]

Great Rob, Thanks.