Cisco Ise 13 User Guide

Create Simple Posture Conditions
Youcancreatefile,registry,application,service,anddictionarysimpleconditionsthatcanbeusedinposture
policiesorinothercompoundconditions.
Before You Begin
Toperformthefollowingtask,youmustbeaSuperAdminorPolicyAdmin.
Procedure
Step 1ChoosePolicy>PolicyElements>Conditions>Posture.
Step 2Chooseanyoneofthefollowing:File,Registry,Application,Service,orDictionarySimpleCondition.
Step 3ClickAdd.
Step 4Entertheappropriatevaluesinthefields.
Step 5ClickSubmit.
Compound Posture...

Cisco-Preconfigured Antivirus and Antispyware Conditions
CiscoISEloadspreconfiguredantivirusandantispywarecompoundconditionsintheAVandASCompound
Conditionpages,whicharedefinedintheantivirusandantispywaresupportchartsforWindowsandMacintosh
operatingsystems.Thesecompoundconditionscancheckifthespecifiedantivirusandantispywareproducts
existonalltheclients.YoucanalsocreatenewantivirusandantispywarecompoundconditionsinCiscoISE.
Antivirus and Antispyware Support Chart...

Compliance Module VersionPosture Condition
3.xorearlierAntivirus
3.xorearlierAntispyware
4.xorlaterAntimalware
3.xorearlierand4.xorlaterDiskEncryption
3.xorearlierand4.xorlaterPatchManagement
4.xorlaterUSB
Non-OPSWAT
AnyversionFile
AnyversionApplication
AnyversionCompound
AnyversionRegistry
AnyversionService
Besuretocreateseparateposturepoliciesforversion3.xorearlierandversion4.xorlater,inanticipation
ofclientsthatmayhaveinstalledanyoneoftheaboveversions.
Note...

Procedure
Step 1ChoosePolicy>PolicyElements>Conditions>Posture>CompoundConditions>Add.
Step 2Enterappropriatevaluesforthefields.
Step 3ClickValidateExpressiontovalidatethecondition.
Step 4ClickSubmit.
Create Patch Management Conditions
Youcancreateapolicytocheckthestatusofaselectedvendor'spatchmanagementproduct.
Forexample,youcancreateaconditiontocheckifMicrosoftSystemCenterConfigurationManager(SCCM),
ClientVersion4.xsoftwareproductisinstalledatanendpoint....

Before You Begin
Toperformthefollowingtask,youmustbeaSuperAdminorPolicyAdmin.YoucanassociateaDisk
EncryptionconditionwithaposturerequirementonlywhenyouusetheAnyConnectISEpostureagent.
Procedure
Step 1ChoosePolicy>PolicyElements>Conditions>Posture>DiskEncryptionCondition.
Step 2ClickAdd.
Step 3IntheDiskEncryptionConditionpage,entertheappropriatevaluesinthefields.
Step 4ClickSubmit.
Configure Posture Policies
Aposturepolicyisacollectionofposturerequirementsthatareassociatedwithoneormoreidentitygroups,...

Posture Assessment Options
Thefollowingtableprovidesalistofpostureassessment(postureconditions)optionsthataresupportedby
theISEPostureAgentsforWindowsandMacintosh,andtheWebAgentforWindows.
Table 48: Posture Assessment Options
ISE Posture Agent for Macintosh
OS X
Web Agent for WindowsISE Posture Agent for Windows
—OperatingSystem/Service
Packs/Hotfixes
OperatingSystem/Service
Packs/Hotfixes
—ServiceCheckServiceCheck
—RegistryCheckRegistryCheck
—FileCheckFileCheck
—ApplicationCheckApplicationCheck...

Table 49: Posture Remediation Options
ISE Posture Agent for
Macintosh OS X
Web Agent for
Windows
ISE Posture Agent for
Windows
MessageText(LocalCheck)MessageText(LocalCheck)MessageText(LocalCheck)
URLLink(LinkDistribution)URLLink(LinkDistribution)URLLink(LinkDistribution)
—FileDistributionFileDistribution
——LaunchProgram
AntivirusLiveUpdate—AntivirusDefinitionUpdate
AntispywareLiveUpdate—AntispywareDefinitionUpdate
——WindowsUpdate
——WSUS
Custom Conditions for Posture...

Youcanfilter,view,add,ordeletefileremediationsintheFileRemediationspage,butyoucannoteditfile
remediations.TheFileRemediationspagedisplaysallthefileremediationsalongwiththeirnameand
descriptionandthefilesthatarerequiredforremediation.
Procedure
Step 1ChoosePolicy>PolicyElements>Results>Posture.
Step 2ClickRemediationActions.
Step 3ClickFileRemediation.
Step 4ClickAdd.
Step 5ModifythevaluesintheNewFileRemediationpage.
Step 6ClickSubmit.
Add a Link Remediation...

Procedure
Step 1ChoosePolicy>PolicyElements>Results>Posture.
Step 2ClickRemediationActions.
Step 3ClickAVRemediation.
Step 4ClickAdd.
Step 5ModifythevaluesintheNewAVRemediationpage.
Step 6ClickSubmit.
Add an Antispyware Remediation
Youcancreateanantispywareremediation,whichupdatesclientswithup-to-datefiledefinitionsforcompliance
afterremediation.
TheASRemediationspagedisplaysalltheantivirusremediationsalongwiththeirnameanddescriptionand
theirmodesofremediation.
Procedure
Step...

Procedure
Step 1ChoosePolicy>PolicyElements>Results>Posture.
Step 2ClickRemediationActions.
Step 3ClickLaunchProgramRemediation.
Step 4ClickAdd.
Step 5ModifythevaluesintheNewLaunchProgramRemediationpage.
Step 6ClickSubmit.
Troubleshoot Launch Program Remediation
Problem
WhenanapplicationislaunchedasaremediationusingLaunchProgramRemediation,theapplicationis
successfullylaunched(observedintheWindowsTaskManager),however,theapplicationUIisnotvisible.
Solution...