topic Re: Install Tenable agent on Cisco ISE Server in Network Access Control

Install Tenable agent on Cisco ISE Server

sinady — Tue, 29 Jun 2021 07:44:24 GMT

Dear Team,

Currently my tenable team need to install tenable agent on Cisco ISE server for perform scanning on server level.

As Cisco ISE server running on virtual appliance. So it is OK to install tenable agent on ISE server?

Does anyone experience on this ?

Really appreciate for your advise.

Re: Install Tenable agent on Cisco ISE Server

Mike.Cifelli — Tue, 29 Jun 2021 11:58:17 GMT

As Cisco ISE server running on virtual appliance. So it is OK to install tenable agent on ISE server?

-Not feasible.

Re: Install Tenable agent on Cisco ISE Server

sinady — Wed, 30 Jun 2021 01:58:50 GMT

Thank @Mike.Cifelli for your feedback. It mean Cisco doesn't allow to install any software on ISE server? Did you have any reference document based on this.

Could you help to share on this ? Thank you.

Re: Install Tenable agent on Cisco ISE Server

Greg Gibbs — Wed, 30 Jun 2021 22:27:44 GMT

The ISE application and database is built on top of a hardened Red Hat operating system. There is no access to the underlying operating system without a temporary root patch that is provided by TAC solely for troubleshooting. As such, it is not possible/supported to install any additional software packages on the ISE appliance.

Re: Install Tenable agent on Cisco ISE Server

sinady — Thu, 01 Jul 2021 08:15:50 GMT

Thank you so much @Greg Gibbs , By the way, do you have any reference document from Cisco about this?

Could you help to share it. Please!

Re: Install Tenable agent on Cisco ISE Server

Greg Gibbs — Fri, 02 Jul 2021 05:34:21 GMT

I'm not aware of a public document that specifically states that, but the User Roles and Permissions for Monitoring and Troubleshooting Capabilities section of the Admin Guide does include a note that states:

Accessing Cisco ISE using the root shell without Cisco TAC supervision is not supported, and Cisco is not responsible for any service disruption that might be caused as a result.

Re: Install Tenable agent on Cisco ISE Server

sinady — Wed, 14 Jul 2021 03:38:41 GMT

I see and thank you.

Re: Install Tenable agent on Cisco ISE Server

markbyrne — Wed, 30 Aug 2023 10:29:39 GMT

Hi,

Can i install tenable on the PGs and the RGR servers ?

Re: Install Tenable agent on Cisco ISE Server

Greg Gibbs — Wed, 30 Aug 2023 22:08:49 GMT

What are 'PGs' and 'RGR' servers? I don't recognise these acronyms in relation to Cisco ISE.

Re: Install Tenable agent on Cisco ISE Server

markbyrne — Thu, 31 Aug 2023 08:10:26 GMT

its not ISE related, it UCCE - Rogger and Peripheral Gateway

Re: Install Tenable agent on Cisco ISE Server

adamscottmaster2013 — Thu, 31 Aug 2023 17:10:05 GMT

@Greg Gibbs: I thought ISE application and database is built on top of CentOS and NOT Red Hat, right? I am pretty sure I saw the CentOS during the system boot up. CentOS is very similar to Red Hat but it is not 100% the same.

Re: Install Tenable agent on Cisco ISE Server

Greg Gibbs — Thu, 31 Aug 2023 22:08:49 GMT

No, it's a hardened version of RedHat which is why the installation steps for VMware state to use the Guest OS Version for RHEL rather than CentOS.