topic Re: ISE in Network Access Control

ISE

miracle_david@yahoo.com — Sat, 08 Aug 2020 14:28:46 GMT

Hi gentlemen,

What do these terms do? 1. dot1x 2. Posture Assessment

Can FirePower do what ISE does?

Thanks

Re: ISE

Rob Ingram — Sat, 08 Aug 2020 15:33:18 GMT

Hi,

802.1X is used to authenticate devices/users to a wired or wireless network.

https://en.wikipedia.org/wiki/IEEE_802.1X

Posture assessment is used in ISE to determine the state of a device, for example whether it is running Anti-Virus, Anti-Malware or Personal firewall before permitted access to the network.

https://community.cisco.com/t5/security-documents/ise-posture-prescriptive-deployment-guide/ta-p/3680273

No Firepower is a Firewall, this is a separate solution to ISE, it does not perform 802.1x authentication.

HTH

Re: ISE

miracle_david@yahoo.com — Mon, 10 Aug 2020 13:08:56 GMT

Thanks for your great reply. Is there any similarity between "Posture Assessment" & "dot1x"? Which one is more complex to deploy? Which one has more stricter features for security?
What does Client Provisioning do?

Re: ISE

Rob Ingram — Mon, 10 Aug 2020 13:28:15 GMT

It's probably a matter of opinon and experience on which is more complex to configure. Posture assessment is more secure, it is usually configured to compliment 802.1x. Without 802.1x you authenticate the user to the network, combine that with posture assessment you determine whether the user is authenticating to the network using a laptop that complies with the organisation's security policy (i.e. is AV, AM or FW installed and running).

Refer to the Posture configuration guide for more information.

https://community.cisco.com/t5/security-documents/ise-posture-prescriptive-deployment-guide/ta-p/3680273

Client provisioning is used to deploy the agent to the connecting devices.

HTH

Re: ISE

thomas — Mon, 10 Aug 2020 20:44:59 GMT

Since you are new to ISE and access control, I would recommend watching some of our past ISE Webinars that cover these topics:

Re: ISE

miracle_david@yahoo.com — Tue, 11 Aug 2020 06:47:26 GMT

Hi sir, I'm very gratitude & grateful for sharing webinars & considering my query. If you have other webinars regarding security like FirePower or other ISE features I'd be glad to watch them.
God bless you!