Performing "offline" compliance module update to new ISE installation

[Mike Masalla]

Hi everybody,

I am just wondering if anyone knows how perform compliance module on a new ISE installation to get the AV and AS updates, while the ISE is "offline", (not connected to Cisco/Internet).

The ISE has Advance Service license, but the customer's security poilcy prohibits connecting any device on their IntraNet to the internet, and if there is any updates to get from the Internet, then it has to be received on the internet network and manually transport it to the IntraNet.

Appreciate your input.

Mike

.                 

[Saurav Lodh]

For offline updates, you need to ensure that the versions of the archive files match the version in the configuration file. Use offline posture updates when you have configured Cisco ISE and want to enable dynamic updates for the posture policy service.

To upload offline posture updates, complete the following steps:

---

Step 1 Go to https://www.cisco.com/web/secure/pmbu/posture-offline.html .

Save the posture-offline.zip file to your local system. This file is used to update the operating system information, checks, rules, and antivirus and antispyware support charts for Windows and Macintosh operating systems.

Step 2 Access the Cisco ISE administrator user interface and choose Administration > System > Settings > Posture .

Step 3 Click the arrow to view the settings for posture.

Step 4 Choose Updates . The Posture Updates page appears.

Step 5 From the Posture Updates page, choose the Offline option.

Step 6 From the File to update field, click Browse to locate the single archive file (posture-offline.zip) from the local folder on your system.

---

Note The File to update field is a required field. You can only select a single archive file (.zip) that contains the appropriate files. Archive files other than .zip (like .tar, and .gz) are not allowed.

Step 7 Click the Update Now button.

Once updated, the Posture Updates page displays the current Cisco updates version information under Update Information.

[Venkatesh Attuluri]

check the following link

http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/release_notes/ise12_rn.html#pgfId-268634

[mohanak]

To upload offline posture updates, complete the following steps:

---

 Step 1 Go to https://www.cisco.com/web/secure/pmbu/posture-offline.html .

Save the posture-offline.zip file to your local system. This file is used to update the operating system information, checks, rules, and antivirus and antispyware support charts for Windows and Macintosh operating systems.

Step 2 Access the Cisco ISE administrator user interface and choose Administration > System > Settings > Posture .

Step 3 Click the arrow to view the settings for posture.

Step 4 Choose Updates . The Posture Updates page appears.

Step 5 From the Posture Updates page, choose the Offline option.

Step 6 From the File to update field, click Browse to locate the single archive file (posture-offline.zip) from the local folder on your system.

---

Note The File to update field is a required field. You can only select a single archive file (.zip) that contains the appropriate files. Archive files other than .zip (like .tar, and .gz) are not allowed.

Step 7 Click the Update Now button.

Once updated, the Posture Updates page displays the current Cisco updates version information under Update Information.