ISE - Posture bluekeep

[carlos.ibarra]

Is there any way that through the ISE postures to verify if the windows are fitted with the patches to avoid bluekeep?

[Anurag Sharma · Accepted solution]

Hi @carlos.ibarra ,

Yes, ISE can check for windows patches. Look for conditions under Work Centers -> Posture -> Policy Elements -> Patch Management. This can check the windows patches installed, through SCCM, Intune, Windows Update Agent. You can then configure Remediation for the machines missing patches.

If you happen to use SCCM, there is a fantastic guide integrating SCCM with ISE.