topic Re: How does ISE handle local credential encryption? in Network Access Control

How does ISE handle local credential encryption?

bobcook1 — Mon, 17 Dec 2018 16:33:59 GMT

Hi all,

My office is in the middle of a security audit. One of the questions that has come up is how the ISE encrypts credentials that are stored locally on the device.

I know Cisco does a Certification process for FIPS 140-2 and has certified ISE 2.2 (2.4 isn't listed). The admin guide for ISE 2.2 also says "Cisco Identity Services Engine uses embedded FIPS 140-2 validated cryptographic modules."

Does anyone know if the embedded FIPS modules in ISE are used to encrypt locally stored username/passwords?

Many thanks in advance!

Re: How does ISE handle local credential encryption?

Timothy Abbott — Mon, 17 Dec 2018 17:05:37 GMT

Hi,

Please see the FAQ section of the ISE Security Best Practices (Hardening) guide.

Regards,

-Tim

Re: How does ISE handle local credential encryption?

bobcook1 — Mon, 17 Dec 2018 17:19:44 GMT

Exactly what I was looking for. Thank you so much!