cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

293
Views
10
Helpful
3
Replies
Highlighted
Cisco Employee

Microsoft Update Posturing

Is there any way to have ISE tell what patch fails on posturing for windows patching?

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

No, ISE only says if the endpoint is Compliant or Non-compliant with your defined policy.

 

View solution in original post

3 REPLIES 3
Highlighted
VIP Advocate

 

 - Here's a bit of a related thread which may contain some hints :

             https://community.cisco.com/t5/network-access-control/ise-posture-failing-for-windows-update-patch/m-p/3989595

 M.

Highlighted

So this helps.  Now I've heard 2 different ways it works.

 

1. ISE checks patch release versions against Microsoft to see if up to date.

2. ISE only checks to see if patches are required on the system and not necessarily the patch version.

 

Which one of those would be accurate?

Highlighted
Cisco Employee

No, ISE only says if the endpoint is Compliant or Non-compliant with your defined policy.

 

View solution in original post