Introduction In modern enterprise networks, compliance is dynamic. Users’ devices may fall out of compliance due to outdated antivirus, missing patches, disabled firewalls, or unapproved apps. Manual remediation is slow, error-prone, and disrupts productivity. Automated Remediation in Cisco ISE transforms NAC from static enforcement into […]
Introduction In modern enterprise networks, simply authenticating a device is no longer enough. Users bring multiple devices, mobile OSes enforce randomization, and threats like unpatched vulnerabilities or non-compliant applications are everywhere. Advanced Posture Multi‑Condition Compliance in Cisco ISE addresses these realities. By evaluating multiple conditions […]
Introduction Multi-tenant policy sets in Cisco ISE allow logical separation of policy, devices, and authentication/authorization flows for multiple tenants, departments, or business units within the same ISE deployment. Each tenant can have its own policy sets, identity sources, authentication rules, authorization profiles, and NAD assignments. […]
Introduction Policy-Based Segmentation is the practice of enforcing network access and micro-segmentation based on identity, device posture, and contextual policy rather than static topology (VLANs). Cisco ISE is the heart of this: it calculates who/what an endpoint is, evaluates device health and contextual signals, and […]
Introduction Firewall Dynamic ACLs (often called downloadable ACLs or dACLs) let Cisco ISE return per-session, per-user, or per-device access rules to enforcement points (firewalls, routers, switches, VPN gateways) at the moment the session is authorized. Instead of static, coarse ACLs tied to VLANs or host-based […]
Introduction Zero Trust requires you to make decisions based on identity, device posture, and context — not on network topology (VLANs). Cisco TrustSec (SGTs + TrustSec enforcement) lets you express who/what can talk to what using Security Group Tags (SGTs) instead of brittle VLANs. Cisco […]
Introduction Industrial switches (Cisco IE, Hirschmann, Moxa, Aruba Industrial, etc.) connect PLCs, HMIs, cameras, sensors and other OT gear. These devices rarely support modern endpoint management or 802.1X, are often safety-critical, and require non-disruptive security controls. Cisco ISE becomes the control plane: it identifies OT […]
Introduction You’re the lead security engineer in a large financial enterprise. It’s Monday morning, and suddenly Stealthwatch starts flagging anomalous traffic from a user’s laptop in your corporate LAN. At first glance, nothing seems wrong — the user is just logged in and working. But […]
Introduction Security telemetry is only useful if it’s collected, parsed, enriched, and acted upon. Cisco ISE holds critical identity, posture, and access events (802.1X, MAB, RADIUS Access-Accept/Reject, posture results, CoA actions, ANC), but those events must be consumed by your SOC fabric so correlation, detection […]
Introduction In the modern enterprise, manual onboarding of users is a bottleneck. Picture this: a new employee joins, HR requests IT to create credentials, IT manually adds them to ISE, assigns groups, emails credentials, and then configures device access. Multiply this by hundreds of employees, […]
