WSUS Integration with ISE 2.1

[cammy.busto]

Hi,

Is anyone can help me on how to integration WSUS with ISE? Im trying to search the docs but failed.

Appreciate your response. Or pls share a link if you find the docs.

Thanks

[Rob Ingram]

Hi,

Here is the ISE/WSUS integration doc - https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/119214-configure-ise-00.html

You'll also find a load of useful ISE related docs here - https://communities.cisco.com/docs/DOC-64012

HTH

[cammy.busto]

Thanks for your response.

Also, I would like to ask if compliance module 3.6 supported with Anyconnect agent 4.4?

[Rob Ingram]

I've successfully used compliance module 3.6 and AC 4.4 together.

Although it looks like the 3.6 compliance module is EOL next year https://www.cisco.com/c/en/us/products/collateral/security/anyconnect-secure-mobility-client/bulletin-c25-739603.html

...they recommend deploying compliance module v4.2.x.x or greater. Probably best to go with the new version if you are just starting a rollout.

[cammy.busto]

Thanks!

compliance module 3.6 works with AC 4.4. But my problem now since I used NAM, Im having issue with the installation of AC agent. 

[Rob Ingram]

You probably want to use AC 4.5, this may or may not fix your installation issue. All bugs found in older version of AC will only be fixed in 4.5.x releases.

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect45/release/notes/b_Release_Notes_AnyConnect_4_5.html

[Rob Ingram]

You probably want to use AC 4.5, this may or may not fix your installation issue. All bugs found in older version of AC will only be fixed in 4.5.x releases.

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect45/release/notes/b_Release_Notes_AnyConnect_4_5.html

[cammy.busto]

Hi RJI,

I installed the ISE 2.1 latest patch version 6. Now, the compliance module 3.6 wasnt able to install in endpoint. I also tried to use compliance module 4.2 resulting to same error. Though I can see in control panel that version was installed but I cant see it in Services. I tried to manually installed the 4.5 ISE Posture Agent, but the problem is unable to posture check the compliance which is to check the windows patch via WSUS. I dont know how can I bind the ISE posture agent 4.5 in Anyconnect Configuration file under Client Provisioning resources.

Please help!