How secure is the ISE image/ADE-OS?

[mamarin2]

Hello All,

I have a customer, who is looking for public documentation on how secure and hardened is the ISE application and  the ADE-OS. Their concern is that since Cisco doesn't provide root access, they can't install their usual 3rd party security tools or verify the server is up to their security standards. They are looking for some technical docs to inform them about the security level on the whole image. They are aware of the ISE hardening guide, but they want security specs of the whole image Cisco provides.

I'm opening this thread, hoping to find if somebody has such documentation or some information about this topic.

Thank you!

[Jason Kunst · Accepted solution]

Besides this link and the ISE admin guide there is nothing more official. It’s a closed system
https://community.cisco.com/t5/security-documents/ise-security-best-practices-hardening/ta-p/3640651

If you still need more you can try to reach out to our PMs at http://cs.co/ise-feedback or internally at http://cs.co/ise-pm please make sure to receive this thread