cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

407
Views
5
Helpful
3
Replies
Highlighted
Beginner

Windows Os Architecture(32bit/64bit) profiling by Cisco ISE Problem.

Hi All.

I want to classify my Clients as Win7 32bit and Win7 64 bit( I want to install some Apps based on os architectures via ISE Posture File remediation and I know this procedure) in Cisco ISE v2.4. Ho can I do that classification? already, I have configured an authorization rule based on  Attribute "Session OS-Architecture:32bit/64bit", but it doesn't work(only profile Microsoft-workstation).

Thanks so much,

Sina HR.

2 ACCEPTED SOLUTIONS

Accepted Solutions
Highlighted
Beginner

Re: Windows Os Architecture(32bit/64bit) profiling by Cisco ISE Problem.

Thanks Colby.lemaire.

when i used "Sessein:OS Architecture" Condition in "Client Provisioning policy", it does not work. but, when I used "Sessein:OS Architecture" Condition in "posture policy", it works and choose rule based on os Architecture condition. interesting.

View solution in original post

Highlighted
Rising star

Re: Windows Os Architecture(32bit/64bit) profiling by Cisco ISE Problem.

Client Provisioning policy is used only to provision the Anyconnect posture agent or to push out supplicant configurations for BYOD.  If you want to push files out to a machine, that would be under the Posture Policy.  You check to see if the file exists and if not, have a file remediation action.

View solution in original post

3 REPLIES 3
Highlighted
Rising star

Re: Windows Os Architecture(32bit/64bit) profiling by Cisco ISE Problem.

First thought is that ISE is not meant to be a software distribution or patch management system.  I would highly recommend looking into something like SCCM to accomplish what you are looking for.

With that said, if you still want to be able to profile the endpoints based on OS details, you will probably need to enable the Active Directory probe and ISE will get the information about the client from AD.  But it will probably not be 100% which is why I wouldn't rely on ISE for pushing files out.

Highlighted
Beginner

Re: Windows Os Architecture(32bit/64bit) profiling by Cisco ISE Problem.

Thanks Colby.lemaire.

when i used "Sessein:OS Architecture" Condition in "Client Provisioning policy", it does not work. but, when I used "Sessein:OS Architecture" Condition in "posture policy", it works and choose rule based on os Architecture condition. interesting.

View solution in original post

Highlighted
Rising star

Re: Windows Os Architecture(32bit/64bit) profiling by Cisco ISE Problem.

Client Provisioning policy is used only to provision the Anyconnect posture agent or to push out supplicant configurations for BYOD.  If you want to push files out to a machine, that would be under the Posture Policy.  You check to see if the file exists and if not, have a file remediation action.

View solution in original post