cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

945
Views
0
Helpful
1
Replies
Highlighted
Beginner

posture checking and software inventory

Dear all,

My customer is looking at using ISE for posture checking as well as software inventory (collecting the OS, patch, installed software information) to check if there is any unauthorized installed software and running green application.

For posture checking, how could ISE posture checking gets the list of windows patches missing and enforce for update (by WSUS?)?

I check that NAC profiler can perform some data search checking http://www.cisco.com/c/en/us/td/docs/security/nac/profiler/configuration_guide/311/Profiler311I-C/p_Util_tab31.html#wp1066923 and I also see that we can use powershell to check software inventory https://blogs.technet.microsoft.com/heyscriptingguy/2013/11/15/use-powershell-to-find-installed-software/

Do we have any ecosystem partner that can integrate with ISE and import software inventory information to ISE?

https://developer.cisco.com/site/identity-services-engine/overview/tech-overview.gsp

Tommy

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

HI Tomak,

You can use WSUS or SCCM for later Microsoft server platforms.

Please see detailed information here. Go to Cisco ISE --> posture and compliance section.

ISE Design & Integration Guides

Thanks

Krishnan

View solution in original post

1 REPLY 1
Highlighted
Cisco Employee

HI Tomak,

You can use WSUS or SCCM for later Microsoft server platforms.

Please see detailed information here. Go to Cisco ISE --> posture and compliance section.

ISE Design & Integration Guides

Thanks

Krishnan

View solution in original post

Content for Community-Ad