cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

596
Views
0
Helpful
1
Replies
Highlighted
Beginner

Question on Posture Remediation

Dear all,

My customer is asking if they can use ISE for posture assessment and enforce below.

-      Check  local firewall status (or enable it if necessary)

Using WMI script? Do we have any sample script?

-      Disable wifi

Using WMI script? Any sample script?

-      Disable USB port completely (or allow read-only access to USB drive)

USB block in ISE 2.1. Could we allow read-only access?

-      Disable network drive mapping

unmount? run a registry key to disable file and print sharing?

-      Disable printing

Changing registry?

-      Disable remote access software say telnet, Putty, RDP, VNC, Teamviewer, pcAnywhere, Webex, Citrix GTM, etc.
How?
-      Firewall like policy that allow particular host access, e.g. proxy server access for Internet browsing

How?

Thanks, Tommy

1 REPLY 1
Highlighted
Cisco Employee

I will redirect your inquiry to our SME on posture.

Content for Community-Ad