cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

493
Views
2
Helpful
4
Replies
Highlighted
Cisco Employee

Posting times for pre-defined posture conditions?

All,

After Microsoft releases a new batch of critical updates/hotfixes, how long does it take before Perfigo pushes out pre-defined checks for those updates? With the older NAC appliance, the release usually occurred within 72 hours. Is that still standard?  Additionally, apart from looking up the conditions in ISE, is there an external site which shows the most updated conditions and or a list of upcoming posture updates?

-Thomas Wall

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Beginner

Microsoft patches are released on 2nd Tuesday of every month. Cisco pre-defined hotfix ruleset will be available in 72 hours. The SLA is still same for ISE.

Can you please be specific about the condition you are referring to?

View solution in original post

4 REPLIES 4
Highlighted
Cisco Employee

From one of our posture DEs, I got a DE manager name who might be in charge of MS hot fixes and updates. I will forward your inquiry along.

Highlighted
Beginner

Microsoft patches are released on 2nd Tuesday of every month. Cisco pre-defined hotfix ruleset will be available in 72 hours. The SLA is still same for ISE.

Can you please be specific about the condition you are referring to?

View solution in original post

Highlighted

Posting here for records:

If I create a posture requirement which specifically checks the file condition pc_W7_64_KB4019264_MS17 and then we release the new Windows 7 MS17 security rollup for June, will my rule in ISE dynamically update with the new named file condition or will we keep the named file condition above and create a new named file condition for the June security rollup?

Highlighted

Update received:

Your own posture requirement would not update dynamically.

Since these are all pre-defined checks we’ll update it in the rule “pr_Win7_32_Hotfixes” which is the preferred condition to use.

Content for Community-Ad