guys pls check the screenshot attached of an ISE patch condition (Win10-Patch Condition.jpg).Does it means ISE posture check whether Windows OS critical patches are up-to-date or BigFix client agent is up-to-date?   I had applied this patch condition...

I have integrated Cisco ISE pxGrid with Cisco FMC. Now, how to send few IP/MAC from Cisco ISE radius authentications to FMC so that the FTD firewall will permit only those IP in the access policy

any method for ISE posture to check whether particular KB are installed in an endpoint windows system. There's no windows WSUS server available too.

how to integrate cisco ISE with BigFix Patch management server. the goal is when a windows endpoint connects to ISE, ISE shd check bigfix patch server whether the endpoint is latest updated.If updated ISE posture permits the endpoint to network.