Salam all,
Looking for best practice to use ISE with SCCM (as MDM) to check windows patches on user’s PCs.
The customer requirement is to identify whether the machine is compliant or not to allow/block network access based on this decision.
Which attributes are best for the ISE to poll form the SCCM?
we've tried the attributes in the below link, but there was a 20 minutes delay on the SCCM to update the pc status to compliant. This will result in a 20 min+ delay after the PC update itself and still not able to connect.
https://community.cisco.com/t5/security-documents/how-to-integrate-cisco-ise-with-microsoft-sccm-for-patch/ta-p/3725035#toc-hId--563478977
Any help will be highly appreciated.
