Some of ISE 2.2 Posture feature question

[ezxw78128]

1. Does it support the current version of Windows on which the client computer can be confirmed?
2. Does it support WSUS updates?
3.Is it possible to check whether the client computer's windows update is updated correctly?

[Mike.Cifelli · Accepted solution]

1. Does it support the current version of Windows on which the client computer can be confirmed?
Yes. There are a couple of ways to perform a check to confirm this. You can actually do a registry check to confirm the exact version.
2. Does it support WSUS updates?
Yes.
3.Is it possible to check whether the client computer's windows update is updated correctly?
I assume you mean updated with the latest patches etc. If so, there are mechanisms you can implement to ensure the latest hotfixes/patches are installed, and if not you have the ability to run remediations.
See this guide for further detail:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_010111.html

[ezxw78128]

If want to meet the above three points, the client computer needs to be installed anyconnect ? right?

I saw the contents of your link"Table 2. Posture Assessment Options" ->"ISE Posture Agent for Windows"

[Mike.Cifelli]

Yes three pieces of software that go hand-in-hand for the posture solution:
Anyconnect Secure Mobility Client
Anyconnect ISE Posture module
Anyconnect ISE Compliance module
Take a peek at labminutes.com/sec. They have some handy tutorials for free. Good luck!