Microsoft Update Posturing

[zascherl86]

Is there any way to have ISE tell what patch fails on posturing for windows patching?

[Mark Elsen]

 - Here's a bit of a related thread which may contain some hints :

             https://community.cisco.com/t5/network-access-control/ise-posture-failing-for-windows-update-patch/m-p/3989595

 M.

[zascherl86]

So this helps.  Now I've heard 2 different ways it works.

1. ISE checks patch release versions against Microsoft to see if up to date.

2. ISE only checks to see if patches are required on the system and not necessarily the patch version.

Which one of those would be accurate?

[thomas · Accepted solution]

No, ISE only says if the endpoint is Compliant or Non-compliant with your defined policy.