topic Re: ISE management in Network Access Control

ISE management

rbonte — Thu, 21 Apr 2016 18:52:15 GMT

Looking for details on how best to manage or monitor ISE as it’s used in TrustSec implementations. Recommended management tools?

Re: ISE management

Timothy Abbott — Thu, 21 Apr 2016 19:26:32 GMT

Hi,

There currently aren't any off-box tools available to manage an ISE deployment. However, you can built a custom application using REST APIs to make changes or retrieve information from the deployment. As for monitoring, ISE can be monitored remotely via SNMP. There are many tools available from vendors for SNMP monitoring. Is that what you are looking for?

Regards,

-Tim

Re: ISE management

hariholla — Thu, 21 Apr 2016 19:58:40 GMT

Cisco ISE is the control and management interface for Cisco TrustSec in general. Starting from ISE 2.0, TrustSec work center consolidates all the TrustSec management options along with monitoring, see screenshot below. In addition to Tim's comment, Cisco Prime infrastructure can be used to configure Enterprise networks with custom templates (for AAA, 802.1X, etc.). NetFlow analyzers like Cisco StealthWatch can be used to monitor network activity based on TrustSec Security Group Tag:

https://www.lancope.com/resources/videos/stealthwatch-cisco-trustsec-walkthrough

Hope this helps,

-Hari

Re: ISE management

hariholla — Tue, 26 Apr 2016 00:27:38 GMT

Just an additional point. Starting from Cisco Prime Infrastructure 3.1, we can now assess the network for TrustSec readiness. Screenshot below:

Re: ISE management

jakub.kacer — Wed, 27 Jul 2022 11:13:22 GMT

Hi,

check out this application for an ISE Management system:

https://www.xtendise.com/

Jakub