12-04-2012 10:31 AM - edited 03-10-2019 07:51 PM
Hi!
Anybody knows how to configure Cisco ISE Posture Policy to check windows Service Pack? For example, we need to create a policy to check if machine has a Antivirus and the last service pack installed. The policy for antivirus it's simple, but we don't know how to configure for Service Pack check.
Thanks!
Solved! Go to Solution.
12-04-2012 11:02 AM
Policy > Policy Elements > Condidtions > Posture > Registry Condition
Use those or duplicate them and modify as you need.
12-04-2012 12:40 PM
For those specifc examples, no. They are pc_ = pre configured from Cisco.
If you want to modify them, you will need to adjust the Value to match what you need.
As always, remember that Registry Valures are CasE SenSITIve. :-)
I find it best to export the reg key area I need and copy-paste leaving out the " Quotation marks"
12-04-2012 11:02 AM
Policy > Policy Elements > Condidtions > Posture > Registry Condition
Use those or duplicate them and modify as you need.
12-04-2012 11:10 AM
Do we need to create the registry condition?
What is the Registry Type, Registry Root Key, Sub-key and Value Operator to check?
Thanks.
12-04-2012 12:40 PM
For those specifc examples, no. They are pc_ = pre configured from Cisco.
If you want to modify them, you will need to adjust the Value to match what you need.
As always, remember that Registry Valures are CasE SenSITIve. :-)
I find it best to export the reg key area I need and copy-paste leaving out the " Quotation marks"
07-20-2013 07:06 AM
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: