Hi,
I have a customer on ISE 3.0 that Authenticates, Authorized and performs two compliant checks on the client.
The AnyConnect version for ISE Posturing is: 4.8.03036. ( I know this is an old version)
The Compliance module is: 4.3.1453.6145
The ISE posturing checks for Anti-Malware and Windows Patch Management.
The Anti-Malware check works perfectly, it scans, passes this posture check or updates if needed.
For Windows Patch Management, it checks to see if the client has the SCCM client installed and if it has the latest Critical patches installed.
Today, we were able to rollback a critical Microsoft patch on the client.
The AnyConnect ISE posturing module connects to ISE and runs a scan for Anti-Malware and Patch Management.
The first scan works for Anti-Malware but the second scan for Patch Management stalls, it continues to stall beyond the 10mins remediation timer on the Posturing Profile.
How do I get the clients to go from Unknown to Non-Compliant if it fails within the remediation time? My client remains on Unknown indefinitely even when the SCCM patched the machine an hour later.
Can I get the AnyConnect client to trigger a scan if it is in an Unknown or Non-Compliant status for 5 minutes?
Thanks
