Some benefit of Cisco ISE

  1. Centralized network access control for wired, wireless and VPN users
  2. Help administrators to comply with security regulations and audits by providing for easy policy creation, visibility, and reporting accross the organization. Administrators can easly perform audits for regulatory requirements and mandated guidelines
  3. Allow adminitrators to match users, endpoints, and each endpoint security posture. It can also proccess attribute like as location, the time the user logged in or logged off, and the access control
  4. Provide network visibility and host identification by supporting profiling capabilites.  Profiling allows you to obtain real-time and hostorical visibility of all the devices on the network
  5. Simplifies the experience of guest user or contractors when accessing network. Cisco ISE provides Self-service registration and fully customizable, branded guest portals that you can configure in minutes
  6. Provide great support bring-your-own-device (BYOD) and enterprise mobility also, with self-service device onboarding and management
  7. Support intenal device certificate management and integration with enterprise mobility management (EMM) partners
  8. Support software-defined segmentation policies for users, endpoints, and other device on your network based on security policies
  9. Leverage Cisco TrustSec technology to define context-based access control using security group tags (SGTs). SGT make segmentation easier when is used in a security group ACL (SGACL)
  10. Uses the Cisco platform exchange Grid (pxGrid) technology to integrate with other cisco product and third-party solutions. pxGrid allows you to maintain threat visibility and fast-tracks the capabilities to detect, investigate, contain, and recover (remediete) security incident
  11. Support TACACS+ and Radius AAA Service, as well as integration with Duo for multifactor authentication and secure access. Cisco ISE also support external authentication server such as LDAP and Active Directory (AD) servers. 
Note :
CIsco ISE can deploy in pyhsical applience and Virtual Machines (VMs), we can create physical or virtual ISE Cluster or greater scalability, redundancy and failover. Cisco ISE VMs supported on VMWare ESXi, Kernel-based VM (KVM), and Red Hat 7.x.

Comments