topic Re: ISE 2.3 Configuration in Network Access Control

ISE 2.3 Configuration

Lawrence Magama — Tue, 20 Feb 2018 10:15:55 GMT

hello

i have a small office network with about 30 users and would like to deploy Cisco ISE2.3. I have:

A Ruckus Zone Director ,

ASA 5500 firewall and A cyberoam firewall for captive portal.

I was able to deploy the Appliance as a virtual machine but now i am stuck on how to get ISE to work. I am having a hard time trying to find clear step by step documentation on how to configure it using the GUI interface.

can anyone lead me in the right direction?

Re: ISE 2.3 Configuration

Arne Bier — Tue, 20 Feb 2018 21:44:03 GMT

Hi Lawrence

There's no easy answer. ISE for newbies can be overwhelming. I would recommend the www.labminutes.com and then search for ISE 1.3 videos on the basics. Yes ISE 1.3 because a lot of stuff hasn't changed since then. As you work your way through the GUI, you will see that ISE 2.3 has new Policy Set 'make over' - but that's really it.

Failing that, you may have to RTFM a bit. The best book I have found to get you up and running without too much marketing fluff, is "Practical Deployment of Cisco Identity Services Engine (ISE): Real-World Examples of AAA Deployments 1st Edition" - the book needs a bit of a makeover, but it read like a manual written by someone who has used this product in the field and wants to share all his knowledge.

The official "Cisco ISE for BYOD and Secure Unified Access (2nd Edition) (Networking Technology: Security) 2nd Edition" is quite good too - anything is better than the official ISE User Guides.

Re: ISE 2.3 Configuration

Nidhi — Wed, 21 Feb 2018 05:23:41 GMT

You can also check the links here-

ISE Design & Integration Guides

ISE Training

Hope this helps

Re: ISE 2.3 Configuration

steve.berglund — Wed, 21 Feb 2018 12:50:33 GMT

I'd recommend you stay away from 2.3. I don't deploy 2.3, and Cisco has even said to stay away. I've had problems with it in my lab eve. Stick with 2.2 until 2.4 is out of beta and has at least 1 patch for it.