ISE Posture - Checking an Specific MS KB

[andre.ortega]

Hello there,

I have ISE 1.2.1 working fine, with posture configured and now I´d like to check if an specific Microsoft KB is installed.

How could I do that using ISE Posture? Have anyone already done that?

Regards.

[jan.nielsen · Accepted solution]

The KB probably creates some specific regkey, or add's some file, you could check that. Most of the built in Cisco KB checkes, use the regkey to find out if the KB is installed.

Ex. KB2758694

SOFTWARE\Microsoft\Updates\MSXML4SP3\Q2758694\

[andre.ortega]

There is no pattern, right?

I mean, each KB can create a regkey in a different place, with differents aspects, or even a file.

I have to get these information from Microsoft, and then I can create a rule, right?

Thanks.

[jan.nielsen]

Not that i know of, there might be some part of the reg key that is the same, but not structured enough to make a simple condition. Also, this would normally be something that you use a patch management system to ensure.

[andre.ortega]

Thank you.