ISE Posture based on OS version

[misinsuan2229]

Hi Cisco Community,

Is there anyway I can include posture to check OS version on Windows or MAC. Policy will be to check if  the Windows is 7 or 10 for compliance and other version will be non-compliant?

We are doing ISE Posture POC in our company and one requirement is having to check Windows OS version, allow only Windows 7&10.

[Timothy Abbott · Accepted solution]

Have you tried using a simple dictionary condition?  There is an attribute for "Endpoints:OperatingSystem" that will allow you to specifiy the OS version you want to check for.

Regards,

-Tim

[misinsuan2229]

Hi Timothy,

the dictionary condition on Policy can only check Windows or Mac, etc, but not really on the OS version like Windows 10 vs Windows 7, is there anyway with it? Maybe I am missing something.

[Nidhi]

You can create a condition to check the registry entry under - HKLM "SOFTWARE\Microsoft\Windows NT\CurrentVersion  

Check the CurrentVersion filed or the ProductName field. 

Thanks,

Nidhi

[manvik]

Thanks, 

I was wondering what should be given in the value field.

ISE does not accept spaces

[Nadav]

That's the condition's name, not the attribute. You can call it: Windows_7_Check. 

Look at the limitations in the textbox you provided.

[AshwinChougule11]

Hello,

I have tried this simple dictionary condition but I am unable to call this condition into the requirements. I have not able to see that option into condition part

[Marcelo Morais]

Hi @AshwinChougule11 ,

 please take a look at the following post: Enforcing OS version using ISE.

Hope this helps !!!