Introduction In modern network architectures, visibility and control over endpoints are critical. Cisco Identity Services Engine (ISE) allows organizations to enforce consistent security policies across wired, wireless, and VPN networks. Security Audit & Policy Review is a pivotal feature in ISE, enabling administrators to proactively […]
Introduction Policy-Based Segmentation is the practice of enforcing network access and micro-segmentation based on identity, device posture, and contextual policy rather than static topology (VLANs). Cisco ISE is the heart of this: it calculates who/what an endpoint is, evaluates device health and contextual signals, and […]
Introduction Firewall Dynamic ACLs (often called downloadable ACLs or dACLs) let Cisco ISE return per-session, per-user, or per-device access rules to enforcement points (firewalls, routers, switches, VPN gateways) at the moment the session is authorized. Instead of static, coarse ACLs tied to VLANs or host-based […]
Introduction Zero Trust requires you to make decisions based on identity, device posture, and context — not on network topology (VLANs). Cisco TrustSec (SGTs + TrustSec enforcement) lets you express who/what can talk to what using Security Group Tags (SGTs) instead of brittle VLANs. Cisco […]
![[Day 121] Cisco ISE Mastery Training: Automated Guest User Creation via API](https://networkjourney.com/wp-content/uploads/2025/08/Day-121-Cisco-ISE-Mastery-Training-Automated-Guest-User-Creation-via-API.png)
Introduction Imagine you’re managing the network for a global enterprise campus or hospitality chain. Every single day, you’re bombarded with requests: “We have 200 guests for today’s event… Please create accounts for them.” If you’ve ever sat in the Cisco ISE GUI and painfully clicked […]
Introduction When we talk about modern NAC (Network Access Control), the real battlefield isn’t just user authentication — it’s device trust, compliance, and dynamic enforcement. Traditional methods that relied on MAC addresses or static profiling are broken by today’s realities: MAC randomization in iOS/Android/Windows, multi-device […]
![[Day 107] Cisco ISE Mastery Training: SDA Fabric Authentication](https://networkjourney.com/wp-content/uploads/2025/08/Day-107-–-Cisco-ISE-Mastery-Training-SDA-Fabric-Authentication.png)
Introduction In the modern enterprise, networks are no longer static — they’re dynamic, software-defined, and built to handle mobile workforces, IoT, cloud integrations, and zero-trust requirements. Traditional VLAN-based segmentation, ACLs, and static security policies simply cannot keep up with the velocity of business change. This […]
Introduction Welcome to Day 109 of Cisco ISE Mastery Training — today, we tackle one of the most business-critical integrations in secure access: Cisco Identity Services Engine (ISE) with Cisco Adaptive Security Appliance (ASA) VPN. Why is this so important? Because in the modern enterprise, […]
Introduction Imagine you’re at a large enterprise headquarters, or a university campus during orientation week. Thousands of visitors, contractors, or students are trying to get Wi-Fi access. Some are there for a single day, others for a semester. Marketing wants the login portal branded to […]
Introduction Imagine a user connecting to your network. At first, they get limited access — maybe just Internet. A few minutes later, Security updates their compliance posture: antivirus updated, corporate certificate installed, endpoint compliant. Now, instead of asking the user to disconnect and reconnect, Cisco […]
