New ISE 2.4 psexec Agentless in the Visibility Wizard Question

[kkaminsk]

Folks,

Does the new agentless psexec function in the ISE 2.4 visibility wizard actually install the Posture agent in Stealth Mode? or does it do the posture checks without installing the stealth mode agent?

If it is not using the stealth mode agent, how are we scanning the Windows system (i.e what commands are we running via psexec?

Thanks,

Ken

[Jason Kunst]

It installs the agent

[hslai · Accepted solution]

Strictly speaking... it does not install the agent.

Instead, it first copies the Cisco temporal agent, along with ISE system certificate and scripts, onto the endpoints. Run the script(s) to import the certificate and launch the temp agent in stealth mode to perform checks. Then, clean up.