cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5322
Views
5
Helpful
3
Replies

Performing "offline" compliance module update to new ISE installation

Mike Masalla
Beginner
Beginner

Hi everybody,

I am just wondering if anyone knows how perform compliance module on a new ISE installation to get the AV and AS updates, while the ISE is "offline", (not connected to Cisco/Internet).

The ISE has Advance Service license, but the customer's security poilcy prohibits connecting any device on their IntraNet to the internet, and if there is any updates to get from the Internet, then it has to be received on the internet network and manually transport it to the IntraNet.

Appreciate your input.

Mike

.                 

3 Replies 3

Saurav Lodh
Rising star
Rising star

For offline updates, you need to ensure that the versions of the archive files match the version in the configuration file. Use offline posture updates when you have configured Cisco ISE and want to enable dynamic updates for the posture policy service.

To upload offline posture updates, complete the following steps:


Step 1 Go to https://www.cisco.com/web/secure/pmbu/posture-offline.html .

Save the posture-offline.zip file to your local system. This file is used to update the operating system information, checks, rules, and antivirus and antispyware support charts for Windows and Macintosh operating systems.

Step 2 Access the Cisco ISE administrator user interface and choose Administration > System > Settings > Posture .

Step 3 Click the arrow to view the settings for posture.

Step 4 Choose Updates . The Posture Updates page appears.

Step 5 From the Posture Updates page, choose the Offline option.

Step 6 From the File to update field, click Browse to locate the single archive file (posture-offline.zip) from the local folder on your system.


Note The File to update field is a required field. You can only select a single archive file (.zip) that contains the appropriate files. Archive files other than .zip (like .tar, and .gz) are not allowed.


 

Step 7 Click the Update Now button.

Once updated, the Posture Updates page displays the current Cisco updates version information under Update Information.

Venkatesh Attuluri
Cisco Employee
Cisco Employee

check the following link

http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/release_notes/ise12_rn.html#pgfId-268634

mohanak
Cisco Employee
Cisco Employee

To upload offline posture updates, complete the following steps:


 Step 1 Go to https://www.cisco.com/web/secure/pmbu/posture-offline.html .

Save the posture-offline.zip file to your local system. This file is used to update the operating system information, checks, rules, and antivirus and antispyware support charts for Windows and Macintosh operating systems.

Step 2 Access the Cisco ISE administrator user interface and choose Administration > System > Settings > Posture .

Step 3 Click the arrow to view the settings for posture.

Step 4 Choose Updates . The Posture Updates page appears.

Step 5 From the Posture Updates page, choose the Offline option.

Step 6 From the File to update field, click Browse to locate the single archive file (posture-offline.zip) from the local folder on your system.


Note The File to update field is a required field. You can only select a single archive file (.zip) that contains the appropriate files. Archive files other than .zip (like .tar, and .gz) are not allowed.


Step 7 Click the Update Now button.

Once updated, the Posture Updates page displays the current Cisco updates version information under Update Information.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: