topic Re: Block Kali-Linux using Cisco ISE in Network Access Control

Block Kali-Linux using Cisco ISE

anonymus1 — Fri, 11 Apr 2025 05:14:05 GMT

Hi All,

We’ve recently implemented Cisco ISE in our environment and are now looking to enhance our network security by blocking all Kali Linux systems from gaining access to the network.

I would appreciate any guidance or best practices on how to effectively detect and block these systems using ISE. Whether it’s through profiling, custom conditions, or policy sets—any suggestions or recommended approaches would be helpful.

Thanks in advance!

Re: Block Kali-Linux using Cisco ISE

Kasun Bandara — Fri, 11 Apr 2025 06:04:55 GMT

@anonymus1 hi, this can achieve with profiling. check below links to understand how profiles working and how can it implement.

https://www.thesecurityblogger.com/cisco-identity-services-engine-ise-profiling-profiler-explained/

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/217818-configure-cisco-ise-3-1-posture-with-lin.html

Re: Block Kali-Linux using Cisco ISE

anonymus1 — Fri, 11 Apr 2025 08:50:44 GMT

Hi @Kasun Bandara. Thanks for the response. I understand that this can be achieved by profiling.Any idea on this can be achieved specifically for Kali-Linux?

Re: Block Kali-Linux using Cisco ISE

anonymus1 — Fri, 11 Apr 2025 09:08:44 GMT

Found a workaround.

https://bst.cisco.com/bugsearch/bug/CSCvz45806?rfs=qvlogin