Which Cisco security solution determines if an endpoint has the latest OS updates and patches installed on the system?

Cisco Endpoint Security Analytics focuses on detecting threats and anomalies through behavioral analysis, not primarily on assessing patch compliance.

Cisco AMP for Endpoints (now Cisco Secure Endpoint) is an advanced malware protection solution for preventing, detecting, and responding to malware, not primarily for OS patch compliance scanning.

"Endpoint Compliance Scanner" is a generic term and not a specific Cisco product that precisely matches the described functionality as a service.

Security Posture Assessment Service, often integrated with solutions like Cisco Identity Services Engine (ISE), checks an endpoint's health and compliance against defined security policies, which typically include verifying the installation of the latest operating system updates, patches, and antivirus definitions before granting network access.