topic ISE 2.0 Kernel Hardening in Network Access Control https://community.cisco.com/t5/network-access-control/ise-2-0-kernel-hardening/m-p/3545363#M540606 <HTML><HEAD></HEAD><BODY><P class="p1"><SPAN class="s1">Hello ISE Team</SPAN></P><P class="p2"><SPAN class="s1"></SPAN></P><P class="p1"><SPAN class="s1">I have a partner asking about the underlying OS in ISE, and if there is any document(s) talking about </SPAN><SPAN class="s2">the OS for ISE 2.x that I can reference for the hardened linux kernel?</SPAN></P><P class="p3"><SPAN class="s1"></SPAN></P><P class="p4"><SPAN class="s1">Thank you</SPAN></P></BODY></HTML> Tue, 02 Feb 2016 21:47:42 GMT algoldst 2016-02-02T21:47:42Z ISE 2.0 Kernel Hardening https://community.cisco.com/t5/network-access-control/ise-2-0-kernel-hardening/m-p/3545363#M540606 <HTML><HEAD></HEAD><BODY><P class="p1"><SPAN class="s1">Hello ISE Team</SPAN></P><P class="p2"><SPAN class="s1"></SPAN></P><P class="p1"><SPAN class="s1">I have a partner asking about the underlying OS in ISE, and if there is any document(s) talking about </SPAN><SPAN class="s2">the OS for ISE 2.x that I can reference for the hardened linux kernel?</SPAN></P><P class="p3"><SPAN class="s1"></SPAN></P><P class="p4"><SPAN class="s1">Thank you</SPAN></P></BODY></HTML> Tue, 02 Feb 2016 21:47:42 GMT https://community.cisco.com/t5/network-access-control/ise-2-0-kernel-hardening/m-p/3545363#M540606 algoldst 2016-02-02T21:47:42Z Re: ISE 2.0 Kernel Hardening https://community.cisco.com/t5/network-access-control/ise-2-0-kernel-hardening/m-p/3545364#M540648 <HTML><HEAD></HEAD><BODY><P>Alex, w<SPAN style="font-size: 10pt;">e don't share specifics, but any unnecessary linux packages are removed and we implement firewall rules that only allows necessary traffic. Also, we have CLI features that can be implemented by customer to harden ISE further:</SPAN></P><P><SPAN style="font-size: 10pt;">- conn-limit: To configure the limit of incoming TCP connections from a source IP address</SPAN></P><P><SPAN style="font-size: 10pt;"><A href="http://www.cisco.com/c/en/us/td/docs/security/ise/2-0/cli_ref_guide/b_ise_CLIReferenceGuide_20/Cisco_ISE_CLI_Commands_in_Configuration_Mode.html#wp1352354776" title="http://www.cisco.com/c/en/us/td/docs/security/ise/2-0/cli_ref_guide/b_ise_CLIReferenceGuide_20/Cisco_ISE_CLI_Commands_in_Configuration_Mode.html#wp1352354776">Cisco Identity Services Engine CLI Reference Guide, Release 2.0 - Cisco ISE CLI Commands in Configuration Mode [Cisco I…</A></SPAN></P><P><SPAN style="font-size: 10pt;">- rate-limit: To configure the limit of TCP/UDP/ICMP packets from a source IP address</SPAN></P><P><SPAN style="font-size: 10pt;"><A href="http://www.cisco.com/c/en/us/td/docs/security/ise/2-0/cli_ref_guide/b_ise_CLIReferenceGuide_20/Cisco_ISE_CLI_Commands_in_Configuration_Mode.html#wp3763469132" title="http://www.cisco.com/c/en/us/td/docs/security/ise/2-0/cli_ref_guide/b_ise_CLIReferenceGuide_20/Cisco_ISE_CLI_Commands_in_Configuration_Mode.html#wp3763469132">Cisco Identity Services Engine CLI Reference Guide, Release 2.0 - Cisco ISE CLI Commands in Configuration Mode [Cisco I…</A></SPAN></P><P></P><P>Hosuk</P></BODY></HTML> Wed, 03 Feb 2016 00:10:29 GMT https://community.cisco.com/t5/network-access-control/ise-2-0-kernel-hardening/m-p/3545364#M540648 howon 2016-02-03T00:10:29Z