Gain awareness of everything hitting your network. Provide access consistently and efficiently. Relieve the stress of complex access management. ISE supports AAA, 802.1X, guest, BYOD, Cisco pxGrid, and mobile device management. Cisco ISE Identity Services Engine can scale to up to 500,000 endpoints per deployment. Cisco physical appliances are based on the Cisco UCS C220 server and get configured to support Cisco ISE Identity Services Engine or choose a VM. Simplify access across wired, wireless, and VPN connections. Policies are cascaded across all types of access points and enforced by Cisco TrustSec software-defined segmentation. Cisco ISE Identity Services Engine simplifies the delivery of consistent, highly secure access control across wired and wireless multivendor networks and remote VPN connections. With far-reaching, intelligent sensor and profiling capabilities, Cisco ISE Identity Services Engine can reach deep into the network to deliver superior visibility into who and what are accessing resources.

In addition, you can protect critical data through the solution’s Cisco Threat Centric NAC feature: Dynamically change your users’ access privileges when their threat or vulnerability scores go up. Stop a threat immediately by directing Cisco ISE to contain the device. Automate your responses so you don’t have to spend time on threats that are clearly identified. Change users’ access privileges before or after they get on the network, based on their threat score. If a device starts to act suspiciously, you can automatically deny it access to critical resources such as finance or patient records while allowing access to noncritical resources. You can use the standard expressions of the Structured Threat Information Expression (STIX) for threats and the Common Vulnerability Scoring System (CVSS) for vulnerabilities to help ensure consistent categorization and responses. Qualys is integrated with Cisco pxGrid for vulnerabilities and Cisco AMP for threats.

[embedyt] https://www.youtube.com/watch?v=AqViZnJwVd8%5B/embedyt%5D

Cisco ISE Identity Services Engine Stop And Contain Network Threats

Reduce risks and contain threats by dynamically controlling network access. Cisco ISE Identity Services Engine can assess vulnerabilities and apply threat intelligence. It can also contain a suspicious device for remediation. We call this Cisco Rapid Threat Containment. Get answers fast about threats on your network and stop them even faster. Cisco Rapid Threat Containment uses an open integration of Cisco’s security products, technologies from Cisco security partners, and the network control of the Cisco Identity Services Engine (ISE). In addition, you can protect critical data through the solution’s Cisco Threat Centric NAC feature; Dynamically change your users’ access privileges when their threat or vulnerability scores go up. Cisco ISE transforms the network from a simple conduit for data into a security enforcer that accelerates the time to detection and time to resolution of threats. The Cisco pxGrid (Platform Exchange Grid) is an open, scalable, and IETF standards driven data sharing and threat control platform.

Cisco ISE Share User And Device Details

Users and devices are shown in a simple, flexible interface. Cisco ISE Identity Services Engine shares details through the Cisco Platform Exchange Grid (pxGrid) with partner platforms to make them user, device, and network aware. Cisco pxGrid’s unified framework makes collaboration possible across systems in multivendor, cross-platform networks. Today’s IT infrastructure requires numerous tools and platforms to keep a network and its connected devices secure and operating smoothly. The frequent result, “silos” of information that isn’t shared. The industry has historically used APIs to share information between platforms. Cisco pxGrid, with its unified framework, effectively addresses this issue. Our ecosystem partners need to integrate their technologies with Cisco pxGrid only once. They can then share context bidirectional with many platforms without the need to adopt platform-specific APIs. Reduce risks and contain threats by dynamically controlling network access. Cisco ISE Identity Services Engine can assess vulnerabilities and apply threat intelligence.

Cisco ISE TrustSec

You need to segment your network to protect critical business assets. But traditional approaches are complex. Cisco TrustSec Software-Defined segmentation is simpler to enable than VLAN-based segmentation. Policy is defined through security groups. It is open through IETF, available within OpenDaylight, and supported on third-party and Cisco platforms. Segment devices without redesigning the network. Easily manage access to enterprise resources. Restrict lateral movement of threats with micro-segmentation. Scale fast and enforce policies consistently across the network. Streamline security policy management across domains. Use Cisco ISE to manage TrustSec security group tags and share information with other group-based policy schemes. Forrester Consulting conducted an analysis of customers using TrustSec Software-Defined Segmentation in production networks. The findings: TrustSec reduced operational costs by 80 percent and enabled policy changes 98 percent faster.
Cisco ISE Identity Services Engine
[TABS_B id=18920]