cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1039
Views
5
Helpful
3
Replies

Some of ISE 2.2 Posture feature question

ezxw78128
Level 1
Level 1

1. Does it support the current version of Windows on which the client computer can be confirmed?
2. Does it support WSUS updates?
3.Is it possible to check whether the client computer's windows update is updated correctly?

1 Accepted Solution

Accepted Solutions

Mike.Cifelli
VIP Alumni
VIP Alumni
1. Does it support the current version of Windows on which the client computer can be confirmed?
Yes. There are a couple of ways to perform a check to confirm this. You can actually do a registry check to confirm the exact version.
2. Does it support WSUS updates?
Yes.
3.Is it possible to check whether the client computer's windows update is updated correctly?
I assume you mean updated with the latest patches etc. If so, there are mechanisms you can implement to ensure the latest hotfixes/patches are installed, and if not you have the ability to run remediations.
See this guide for further detail:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_010111.html

View solution in original post

3 Replies 3

Mike.Cifelli
VIP Alumni
VIP Alumni
1. Does it support the current version of Windows on which the client computer can be confirmed?
Yes. There are a couple of ways to perform a check to confirm this. You can actually do a registry check to confirm the exact version.
2. Does it support WSUS updates?
Yes.
3.Is it possible to check whether the client computer's windows update is updated correctly?
I assume you mean updated with the latest patches etc. If so, there are mechanisms you can implement to ensure the latest hotfixes/patches are installed, and if not you have the ability to run remediations.
See this guide for further detail:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_010111.html

If want to meet the above three points, the client computer needs to be installed anyconnect ? right?

I saw the contents of your link"Table 2. Posture Assessment Options" ->"ISE Posture Agent for Windows"

Yes three pieces of software that go hand-in-hand for the posture solution:
Anyconnect Secure Mobility Client
Anyconnect ISE Posture module
Anyconnect ISE Compliance module
Take a peek at labminutes.com/sec. They have some handy tutorials for free. Good luck!