Uploading Antivirus / security packages to ISE for clients to download.

[n-russell-biggie]

Hello,

I am struggling to create posture and client provisioning on ISE 2.4.

I have configured posture that checks for a simple file condition on the clients laptops / workstations and this works fine.

I would like to test posture to check that Microsoft Security Essentials installation is present on client and if not for client to be redirected to ISE to download the package. The issue is that I can not find where to upload the MS Security essentials package to on ISE. I tried to upload to the resources section in client provisioning on ISE but it seems that I can only upload anyconnect packages etc.

Any help would be much appreciated.

Thanks

Nick

[ma.alsaffar]

Hi,

I do not know if there is an option to upload package to ISE to allow enduser to download it. However, one trick we used is to choose remediation action as message only when the posture failed, you can enter URL link created internally and allow all users to have access to it so whenever posture of AV installation failed, a message like this will shown:

MS essenital is not installed in your PC,

please download the following and try again:

https://10.10.10.10/MsEssential.msi

Regards,

[Jason Kunst · Accepted solution]

File remediation

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_011110.html#reference_F304C79D82674621A0CBAEBED45066D9

[n-russell-biggie]

Many thanks. This works.

[Nidhi]

A common practice used by many customers is to provide a link to download and install the package. since installation is a manual process.