Remediation Option

[rajatsha]

Hello Everyone,

I am sure I am not the first person asking this question but could not find anything around it so raising in this forum.

I have a question in relation to remediation. We are using Anyconnect ISE posture stealth client and we are able to determine whether the Windows firewall service is running on not using the Posture "Service condition" using service name "MpsSvc" however I am not able to determine how can I enable this service (during remediation) once the posture fail.

As we have stealth client I am looking for an automatic remediation.

Best Regards,

Rajat Sharma

[Craig Hyps · Accepted solution]

Try using Launch Program remediation available in Stealth mode. 

http://www.itprotoday.com/windows-8/how-can-i-stop-and-start-services-command-line

The 'net' command could be the executable and the 'start MpsSvc' the parameter.  Else could call needed commands from an executable script to perform the same function. 

[rajatsha]

Thank you....works smoothly now after creating the new remediation rule.