Policy Creation for Anti-Malware Compliance
In our environment, we have two types of anti-malware solutions, the requirement is to ensure that each device has at least one of these anti-malware solutions installed, and that their virus definitions are always up to date. How this can be enforced using Cisco ISE posture checks.
Challenge:
When setting up a posture compliance policy to ensure that at least one of the anti-malware solutions is active on endpoint and its virus definitions are current. While it’s possible to set the "OR" condition for installation, but the remediation logic not able to create checking both anti-malware definitions under a single requirement.
