Application blocking

[ymadheka]

Hi Team,

Is it possible for the NGIPS to understand the presence of application on end user system and then take decision of blocking the network communication of the same like for example the AV is not present then block the communication of that device to the critical servers on the network.

It is possible through ISE, just wanted to verify if IPS can do any thing like this

Thanks & Regards,

Yogesh Madhekar

[Marius Gunnerud]

IP can not do this.  ISE can but you need to install a NAC agent on the PC.

http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/116143-config-cise-posture-00.html#anc5

--

Please remember to select a correct answer and rate helpful posts