ISE Posture Condition for Windows Service Pack and Remediation

Hi,
We having ISE ver 1.1.1 and currently on PoC. I have the following points to be clarified for Posture and Remediation.
1) How to configure a condition to check Windows Service pack (may be more than 1 Windows favor such as XP, Win 7 and Win 8) and how to remediate in case client is not complying with Windows requirement.
2) I configure AV condition and looks its working fine, however I still couldnt find the place to how to remediate in case client is not having proper verion and AV definition on his PC.
3) We have a Authorization profile configured with dACL"Posture Remediation" where we allowing AV server update url and also matching ACL configured on switch "Posture Redirect", wants to know the exact purpose on these two ACLs.
4) where can we see the logs of none-complaints logs and find out the reason for non-complaints
appreciate if someone can please give us a proper document to achive the above task or send me any working senario configuration steps.
thanks in advance.

1. Windows Server Update Services (WSUS) remediation remediates Windows clients from a locally managed WSUS server, or Microsoft-managed WSUS server with the latest Windows service packs, hotfixes, and patches (WSUS updates) for compliance. You can create a WSUS remediation where a NAC Agent integrates with the local WSUS Agent to check whether the endpoint is up-to-date for WSUS updates. You can also duplicate, edit or delete WSUS remediations from the remediations list.
You can configure Windows clients to receive the latest WSUS updates from a Microsoft-managed WSUS server, or locally administered WSUS server for compliance.
The Windows server update services (WSUS) remediations list page displays all the WSUS remediations along with their names, description, and as well as their modes of remediation
check the following link for configuration
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_pos_pol.html#wp1554782
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_pos_pol.html#wp1554884
2.for AV/AS Remidiaton configuration check this link http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_pos_pol.html#wp1657420

Similar Messages

Installed windows service pack and now can't see igoogle content

I recently installed a service pack for Office 32bit on my Sony Vaio. Now I cannot see any of my page content on Igoogle, or certain features on Ebay. I checked my popup filter, and even turned it off, and that didn't help.

The updater's now built into iTunes, which came with a new version of the iPod's required background service, rendering all previous updaters void.
To get to the updater, go to the iPod in the sources panel (left-hand side), and you should see the Update and Restore buttons.

How to find out the IPS and DS Service Pack and patch levels in windows server.

Hi,
I have installed the Information Platform Services 4.0 and Data services 4.0 in windows QA system, now we need to install the same version of IPS & DS in windows PRD system for this how could we find out the exact version of IPS & DS ( Service pack and patch levels ) and where we can find the same.
Many Thanks,
Sudheer

Hi Sudheer,
On a Windows Operating Systems you can check the “Programs and Features” in control panel.You can see a list of both the Name and Version number of SAP BusinessObjects that is installed.
option 2:
Open CMC go to Settings. In the properties, you will find the Product Version.
Please check below SAP notes for more information.
http://service.sap.com/sap/support/notes/1602088
Regards,
Pavan

Application Restart and Recovery APIs doesn't work for windows services

I am using the Application Restart and Recovery mechanism (provided in Windows API Code Pack for Microsoft.NET Framework) to collect some information (i.e. stack information when there's an unhandledexception) before my windows service crash down.
It works well for windows form applications, but the callback method wouldn't be called if the host is a windows service.
I have checked the article: https://msdn.microsoft.com/zh-cn/subscriptions/downloads/cc303708
But it doesn't specify clearly whether it works for a windows service. It seems that the recovery will only be activated when the user interacts with the error dialog of Windows Error Reporting (clicking "close" on the dialog, for example).
So I am wondering is my guess right that the Application Restart and Recovery mechanism doesn't work for windows services. Or is there a better way to meet my requirement?

I would suggest trying ARR if that's what you want to use. The restart portion won't work, but it doesn't need to as if you fail out of your service, the Windows service controller will handle recovery (up to and including restarting your service).
You configure those recovery actions either through code or one of the built in administrative tools for services such as services.msc.
DebugDiag/ADplus and similar tools ultimately do use built-in APIs; you don't need to add anything external to collect debugging information. You do however have to write a good deal of code to do somethings. It's pretty simple to use the unmanaged
function that I pointed out before and
MiniDumpWriteDump to write a minidump when you hit an unexpected error(the dbghelp.dll that comes installed with Windows has it so you don't need anything additional installed). You can even write a basic debugger that literally debugs a process using
only kernel32 functions (see
https://msdn.microsoft.com/en-us/library/windows/desktop/ms679301(v=vs.85).aspx if you're interested).
WinSDK Support Team Blog: http://blogs.msdn.com/b/winsdk/

Zen 3.2 snap shot to force out windows 2000 service packs and critical patches

Zen 3.2 snap shot to force out windows 2000 service packs and critical
patches
has anyone used MSI to do the installations of services packs.

All Hotfixes and SPs have switches on the EXEs to allow for silent
installs.
This is the recommended method of deploying these.
[email protected] wrote:
> Zen 3.2 snap shot to force out windows 2000 service packs and critical
> patches
> has anyone used MSI to do the installations of services packs.

Toshiba Support for Microsoft Windows Service Packs ?

Does Toshiba provide Downloads,
for the Microsoft Service Pack
( For example Windows XP Service Pack ) ???

The easiest way for you to find Information about Windows Service Packs is to surf on the Toshiba Website of your Country and look at Support & Download.
There you find the a Category Microsoft Service Packs.
The Link for Toshibe Europe for example is -> http://eu.computers.toshiba-europe.com/

Service packs and hot fixes for BusinessObjects Enterprise XI 3.1

Hello Experts.
Which is the cronology or order of the service packs and hot fixes for BusinessObjects Enterprise XI 3.1, or which are tha latest?
thanks

For BO XI 3.1, SP 5 is the latest, released in August 2011. You can directly install SP5 if you already have SP3 installed.
Previous Service Pack is 4.0 and Fix Pack 4.1.

Service Packs and Fix Packs for Business Objects XI Release 2

Hi,
How can I know wich services pack or fix packs are installed on my server? I have installed Business Objects XI Release 2, and Xcelsius 2008 Release 2, and Live Office.
Do you know where can I download a spreedsheet that contains informatiion about the fix packs or service packs and the issues that solved??
Thanks
Lilia

Your first question was answered many time int his forums, please use search functionality before posting a question.
There is no publicly available Version matrix + fixed issues list.
However, you can do to Service Market Place > Downloads locate XIR2 section and see how many Service Packs and Fix Packs are available.
Latest Service Pack for XIR2 is 6
latest Fix Pack for XIR2 is FP6.4 (needs to be installed on top of SP6)
To the right of each SP/FP in the download section of SMP is a link called "Info" , it leads to Knowledge articles which contain list of fixed issues.
As all SP/FP's are cumulative, you can view Sp6 readme and Fp6.4readme to get overall picture of fixed issues.

Where do I find service packs and hotfixes for 6.5.1?

Anyone knows where to find service packs and hotfixes for 6.5.1? Only find new releases..
Getting this problem and they said something about hotfix 640
http://www.forumtopics.com/busobj/viewtopic.php?t=35362&postdays=0&postorder=asc&start=30
But it is impossible to find anything like that...
Thanks in advance!
/ Tomas Bengtsson

I have found it. So annoying finding the right site just 5 minutes after posting this

Audigy 4 asking for XP Service Pack 2 CD, no such th

When installing Audigy 4, the software asks to put in the Windows XP Service Pack 2 CD. Of course there is no such CD as this PC came with Service Pack and was on line updated to Service Pack 2. The installation won't complete and continues to reinstall.
The actual message is "Some files on Windows XP Professional Service pack 2 CD are needed". This is very disappointing.

freesky wrote:
Here's the direct download for the Windows XP Service Pack 2 from microsoft. Just to make sure you have it installed, download it and install it.Windows XP Service Pack 2 Network Installation Package for IT Professionals and Developershttp://www.microsoft.com/downloads/d...DisplayLang=en
I'm I'm failing to communicate here... I DO have it already installed. So, if it is already installed on my HD, why does the Creative CD prompt me for the service pack CD ???

Can't upgrade I tunes because of problems with Windows Service Pack 2

My daughter and I got shuffles for Christmas. I am unable to upgrade to the necessary version of I tunes because I do not have SP2. When I try to download the windows service pack 2 my computer crashes. Any suggestions? Are there any ways around this?

Hi there
It could be that this particular file has some corruption. It could also simply be that the number of objects in the file is somewhat taxing your PC resources.
You might try what is outlined in the link below and see if it helps anything.
Click here to read
The post you are likely interested in was made by Jayashree and involves tweaking a setting in the Windows Registry.
Cheers... Rick
Click here for Adobe Certified Captivate and RoboHelp HTML Training
Click here for the SorcerStone Blog
Click here for RoboHelp and Captivate eBooks

ITunes stopped working after Windows Service Pack 2

Maybe it's a coincidence, but I've been having all sorts of problems loading the latest iTunes version (64-bit) ever since I downloaded (not by choice) WIndows Service Pack 2.
iTunes just won't open.
First it would open and say that the color scheme had been changed by some setting somewhere.
Then it wouldn't open at all.
I've fooled around with permissions and compatibility settings -- I've reinstalled the latest iTunes for WIndows 64-bit -- and iTunes just will not load.
I've seen some evidence online that I'm not alone in this problem, though it's hard to tell. The solutions I've seen seem to be a bit complicated -- does anyone have any information on this problem or am I going to have to go back to an Apple computer if I want to continue using iTunes???
Thanks for any help.
B
PS For now I've got to leave on a 4 -hour trip for which I'll have no music thanks to this problem -- so any and all help will be greatly appreciated.

Roll back the service pack.(uninstall software through control panel.) Does it work again?
Reinstall service pack. Make sure antivirus and all other software is not running in background. Reboot.

Airport extreme with windows service pack 2

I have just recently bought a macbook pro laptop, & have been corresponding with a forum member about a wireless setup.
I want to have a wireless set up with a PC desktop with windows xp home service pack 2 that is stationed in the kitchen. This was recommended to me in this forum. Right now the PC has an Ethernet black box, with at&t DSL service. It has one yellow Ethernet cable coming from the black box to the PC & one grey DSL cord coming out of the black box & connects to a phone in the kitchen. I bought the laptop for my online classes so steady reliable internet service is crucial. Upon reading the specs of the airport extreme however got me a little concerned about which service pack I can use.
Here is my question & comment from another member on this forum;
I just noticed a PC has to have windows service pack 3, I have service pack 2, will it work with service pack 2? I am reluctant to update to service pack 3, my story behind my reluctance; the last time I did it, my PC completely crashed, the hard drive died. It had to be replaced, & ever since I get a little yellow alert to update to service pack 3, but I have not done it out of fear of another meltdown. Right now it is the only computer in our house, & I need it for my online classes. Last summer when I tried the service pack 3 update, & subsequent PC meltdown, I had to go to a public computer lab to finish off an online class, so I do not want to go through this again.
And this is what they said;
+That will give you wired internet access at the PC. Of course, the MacBook Pro will be wireless. I am not sure about the technical specifications required for the Airport. My initial reaction is that you should be fine to use the Airport as just a router with the PC with Service Pack 2. I think SP3 is just required for administration of the Airport using the Airport Utility for Windows. But, you could administer the Airport with your MBP. You may want to confirm this in the Airport forum unless somebody else here knows for sure! Sorry!+

Which would be more powerful & reliable? the newest airport extreme or the aiport with the 500GB time capsule?
Again, it will depend on what your networking requirements are. If we are talking about support for Time Machine backups, then only the Time Capsule (of the two options you listed) would work. Apple doesn't currently support these backups to drives attached to the AirPort Extreme Base Station.
Would I be better off with something that is just for wireless internet? or a combo unit time capsule & airport?
If you don't have any networking gear now, then it may make better sense to go with a combination unit.

Unable To Install Windows Service Pack 3

Hi,
I just reinstalled windows xp (32bit)for the 3 time in as many months, and I've ran into a problem with the reinstallion Windows Service Pack 3. I keep getting an error that says something to the effect of 'file x can not be found. are you sure (windows dl location) is correct. would you like to retry.' and this repeats a few times until I lose my patience and give up. Anyone know how to fix this?
Cheers
Alex

Hi Alex,
maybe this http://support.apple.com/kb/HT3841 can help you.
Also if you have any kind of 'unneccessary' external devices connected while trying to update, like external harddisks, printer, scanner, etc., disconnect them before applying the update.
Hope it helps
Stefan

Getting Windows Service Pack

Is there a way to programmatically get the service pack for the operating system?
I know System.getProperty("os.version") will give me the operating system version, but I don't see a property that holds the service pack. It looks like I may only be able to get the service pack by creating a DLL with a function that gets the Service Pack and then call out to that DLL from Java. Is that correct? Thanks.

You can retrieve Windows Service Pack using System.getProperty ("sun.os.patch.level"). In my Windows 2003 SP 1 and JDK 5.0:
os.name = "Windows 2003"
sun.os.patch.level = "Service Pack 1"

ISE Posture Condition for Windows Service Pack and Remediation

Similar Messages

Maybe you are looking for