05-16-2017 09:15 AM
All,
After Microsoft releases a new batch of critical updates/hotfixes, how long does it take before Perfigo pushes out pre-defined checks for those updates? With the older NAC appliance, the release usually occurred within 72 hours. Is that still standard? Additionally, apart from looking up the conditions in ISE, is there an external site which shows the most updated conditions and or a list of upcoming posture updates?
-Thomas Wall
Solved! Go to Solution.
05-17-2017 12:28 AM
Microsoft patches are released on 2nd Tuesday of every month. Cisco pre-defined hotfix ruleset will be available in 72 hours. The SLA is still same for ISE.
Can you please be specific about the condition you are referring to?
05-16-2017 03:46 PM
From one of our posture DEs, I got a DE manager name who might be in charge of MS hot fixes and updates. I will forward your inquiry along.
05-17-2017 12:28 AM
Microsoft patches are released on 2nd Tuesday of every month. Cisco pre-defined hotfix ruleset will be available in 72 hours. The SLA is still same for ISE.
Can you please be specific about the condition you are referring to?
05-17-2017 07:45 AM
Posting here for records:
If I create a posture requirement which specifically checks the file condition pc_W7_64_KB4019264_MS17 and then we release the new Windows 7 MS17 security rollup for June, will my rule in ISE dynamically update with the new named file condition or will we keep the named file condition above and create a new named file condition for the June security rollup?
05-17-2017 11:04 AM
Update received:
Your own posture requirement would not update dynamically.
Since these are all pre-defined checks we’ll update it in the rule “pr_Win7_32_Hotfixes” which is the preferred condition to use.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide