Cisco Ise 13 User Guide
Here you can view all the pages of manual Cisco Ise 13 User Guide. The Cisco manuals for Interface are available online for free. You can easily download all the documents as PDF.
Page 51
createandapplyCiscoISEserviceswheretheyareneededinthenetwork.Theresultisacomprehensive CiscoISEdeploymentthatoperatesasafullyfunctionalandintegratedsystem. CiscoISEnodescanbedeployedwithoneormoreoftheAdministration,Monitoring,andPolicyService personas—eachoneperformingadifferentvitalpartinyouroverallnetworkpolicymanagementtopology. InstallingCiscoISEwithanAdministrationpersonaallowsyoutoconfigureandmanageyournetworkfrom acentralizedportaltopromoteefficiencyandeaseofuse....
Page 52
TheauthorizationpolicyresultisCiscoISEassigninganauthorizationprofilethatmightalsoinvolvea downloadableACLspecifyingtrafficmanagementonthenetworkpolicyenforcementdevice.Thedownloadable ACLspecifiestheRADIUSattributesthatarereturnedduringauthenticationandthatdefinetheuseraccess privilegesgrantedonceauthenticatedbyCiscoISE. CiscoISEprocessestheattributesinthefollowingorderwhileidentifyingtheAuthenticationsessionfor theincomingaccountingpacket: Note •ForCiscodevices: 1Class/State 2audit-session-id...
Page 53
CiscoISEonlysupportslogintotheAdminportal.ItdoesnotsupportCACauthenticationforthefollowing accessmethods: •YoucannotuseCACauthenticationlogintomanagetheCiscoISECommandLineInterface. •ExternalRESTAPI(MonitoringandTroubleshooting)andEndpointProtectionServicesAPIsareoutside thescopeoftheCACauthentication. •GuestServicesandGuestSponsorAdministrationaccessdoesnotsupporttheCACauthentication methodinCiscoISE. Client Posture Assessment...
Page 54
aPluslicense,CiscoISEprovidesyouwiththetoolsyouneedtoallowemployeestosecurelyusetheir personaldevicesonyourcorporatenetwork. Mobile Device Manager Interoperability with Cisco ISE MobileDeviceManagement(MDM)serverssecure,monitor,manage,andsupportmobiledevicesdeployed acrossmobileoperators,serviceproviders,andenterprises.MDMenforcespolicyonendpoints,butitcannot forceuserstoregistertheirdeviceorforceremediation.ISEretrievespoliciesfromtheMDMserver,and...
Page 55
Cisco ISE Certificate Authority CiscoISEprovidesanativeCertificateAuthority(CA)thatissuesandmanagesdigitalcertificatesforendpoints fromacentralizedconsoletoallowemployeestoconnecttothecompany'snetworkusingtheirpersonal devices.CiscoISECAsupportsstandaloneandsubordinatedeployments. Support for Active Directory Multidomain Forests CiscoISEsupportsActiveDirectorywithmultidomainforests.CiscoISEconnectstoasingledomain,but...
Page 56
Cisco Identity Services Engine Administrator Guide, Release 1.3 10 Support for Installation on Multiple Hardware and VMware Platforms
Page 57
CHAPTER 2 Navigate the Admin portal •AdminPortal,page12 •SetupAssistant,page14 •FilterDataonListingPages,page18 •CiscoISEInternationalizationandLocalization,page20 •MACAddressNormalization,page26 •AdminFeaturesLimitedbyRole-BasedAccessControlPolicies,page27 Cisco Identity Services Engine Administrator Guide, Release 1.3 11
Page 58
Admin Portal TheAdminportalisanadministrationconsolefromwhichyoucanmanagevariousidentityservices.The followingfigureshowsthemainelementsofthisportal. Figure 1: Admin portal Accesstoolsforviewing,monitoring,andmanagingdifferentCiscoISEoptions: •Home:Accessthedashboard,whichisareal-timeviewofalltheservices runningintheCiscoISEnetwork. •Operations:Accesstoolsformonitoringreal-timealarmsandlive authentications,queryinghistoricaldatathroughreports,andtroubleshooting networkservices....
Page 59
Accesshelpforthecurrentlydisplayedpage.Context-Sensitive Help 5 AccessthecompleteCiscoISEonlineHelpsystem.Help6 Hoverthemousecursoroverthisoptiontoviewasummaryofnotifications.Notifications7 Cisco ISE Dashboard TheCiscoISEDashboarddisplaysliveconsolidatedandcorrelatedstatisticaldatathatisisessentialfor effectivemonitoringandtroubleshooting.Dashboardelementsshowactivityover24hours,unlessotherwise noted.ThefollowingfigureshowssomeoftheinformationavailableontheCiscoISEDashboard. Figure 2: Cisco ISE User...
Page 60
Summarizethemostimportantstatisticsregardingthedevicesthatareaccessing thenetwork.Metricmetersprovideanat-a-glanceviewofnetworkhealthand performance.Youcanclickthenumberdisplayedabovethemetricsmeterto viewmoreinformationaboutthedevices. Metricmeters4 Setup Assistant TheSetupAssistantguidesyouthroughaseriesofquestionsinawizard-likeinterfaceretainingyourresponses andusingthemtoconfigureCiscoISEdirectly.ItenablesyoutosetupabasicworkingCiscoISEconfiguration...