Introduction “Today we’ll turn endpoint management in ISE into code. We’ll automate the full lifecycle of endpoints (MAC identities): create, search, update, move between Endpoint Identity Groups, tag with custom attributes, trigger ANC quarantine, force reauth/CoA, and bulk-import MACs from CSV. We’ll verify every API […]
Introduction “Today we’ll automate Internal User lifecycle in Cisco ISE using ERS (External RESTful Services) API and validate authentications with MnT and NAD CLI. You’ll build single-user and bulk (CSV) workflows, enforce identity groups, password policy, and prove end-to-end RADIUS success in logs and on […]
Introduction “Today you’ll turn Cisco ISE into an automation platform. We’ll use the ERS (External RESTful Services) API and the MnT (Monitoring) A to do real work: auto-onboard endpoints, push ANC quarantine, read live sessions, and integrate with tools like SecureX/CI/CD. By the end, you’ll […]
Introduction “Today we wire real-time threat response: when FMC/FTD, Secure Endpoint (AMP), or Stealthwatch flags a compromised host, ISE auto-quarantines it over the network. We’ll use pxGrid for secure event and identity exchange, and ANC for enforcement (dACL / SGT / VLAN). You’ll leave with […]
Introduction Cisco Identity Services Engine (ISE) and Firepower Management Center (FMC) form a powerful threat-centric NAC ecosystem when integrated via pxGrid. But here’s the reality: In production, engineers often struggle with cert trust failures, pxGrid client not connecting, SGT not being seen in FMC, or […]
Introduction What you’ll master today: Building, securing, and validating pxGrid 2.0 so Cisco ISE can publish identity, posture, SGT, profiling, endpoint status, and ANC to your security ecosystem (FMC/FTD, SecureX, Stealthwatch/Secure Network Analytics, AMP/Secure Endpoint, Splunk/SIEM, DNAC, custom apps). You’ll configure end-to-end, prove data flows, […]
Introduction Cisco Firepower Management Center (FMC) is the brain behind Cisco’s Next-Generation Firewalls (NGFWs). By integrating FMC with Cisco ISE using pxGrid, you allow FMC to consume contextual identity and group information (like usernames, endpoints, SGTs, compliance posture, threat scores).This enables dynamic policy enforcement on […]
Introduction In Threat-Centric NAC (TC-NAC), Cisco ISE doesn’t “hunt malware” itself—it ingests threat verdicts and enforces. With Cisco AMP for Endpoints (now Cisco Secure Endpoint), ISE subscribes to live threat events and dynamically quarantines or restricts infected hosts using VLAN changes, dACLs, or TrustSec SGACLs—automatically […]
Introduction “Who is on my network?” is only half the question—what they are matters even more. Cisco ISE’s Profiler turns raw signals (DHCP, RADIUS, SNMP, HTTP, device-sensor, NetFlow, etc.) into precise endpoint identities (e.g., “HP LaserJet Pro M404dn”, “Cisco 88xx IP Phone”, “Axis M30 camera”, […]
Introduction Wired networks still carry most enterprise East/West traffic, printers, IP phones, scanners, and user PCs. Cisco TrustSec replaces sprawling IP/VLAN ACLs with Security Group Tags (SGTs) and role-based enforcement. With ISE assigning SGTs at the port during 802.1X/MAB, your Catalyst switches can tag traffic […]
