Solved: Install Tenable agent on Cisco ISE Server

sinady · ‎06-29-2021

Dear Team,

Currently my tenable team need to install tenable agent on Cisco ISE server for perform scanning on server level.

As Cisco ISE server running on virtual appliance. So it is OK to install tenable agent on ISE server?

Does anyone experience on this ?

Really appreciate for your advise.

Greg Gibbs · ‎07-01-2021

I'm not aware of a public document that specifically states that, but the User Roles and Permissions for Monitoring and Troubleshooting Capabilities section of the Admin Guide does include a note that states:

Accessing Cisco ISE using the root shell without Cisco TAC supervision is not supported, and Cisco is not responsible for any service disruption that might be caused as a result.

View solution in original post

Mike.Cifelli · ‎06-29-2021

As Cisco ISE server running on virtual appliance. So it is OK to install tenable agent on ISE server?

-Not feasible.

sinady · ‎06-29-2021

Thank @Mike.Cifelli for your feedback. It mean Cisco doesn't allow to install any software on ISE server? Did you have any reference document based on this.

Could you help to share on this ? Thank you.

Greg Gibbs · ‎06-30-2021

The ISE application and database is built on top of a hardened Red Hat operating system. There is no access to the underlying operating system without a temporary root patch that is provided by TAC solely for troubleshooting. As such, it is not possible/supported to install any additional software packages on the ISE appliance.

sinady · ‎07-01-2021

Thank you so much @Greg Gibbs , By the way, do you have any reference document from Cisco about this?

Could you help to share it. Please!

Greg Gibbs · ‎07-01-2021

I'm not aware of a public document that specifically states that, but the User Roles and Permissions for Monitoring and Troubleshooting Capabilities section of the Admin Guide does include a note that states:

Accessing Cisco ISE using the root shell without Cisco TAC supervision is not supported, and Cisco is not responsible for any service disruption that might be caused as a result.

sinady · ‎07-13-2021

I see and thank you.

markbyrne · ‎08-30-2023

Hi,

Can i install tenable on the PGs and the RGR servers ?

Greg Gibbs · ‎08-30-2023

What are 'PGs' and 'RGR' servers? I don't recognise these acronyms in relation to Cisco ISE.

adamscottmaster2013 · ‎08-31-2023

@Greg Gibbs: I thought ISE application and database is built on top of CentOS and NOT Red Hat, right? I am pretty sure I saw the CentOS during the system boot up. CentOS is very similar to Red Hat but it is not 100% the same.

Greg Gibbs · ‎08-31-2023

No, it's a hardened version of RedHat which is why the installation steps for VMware state to use the Guest OS Version for RHEL rather than CentOS.

markbyrne · ‎08-31-2023

its not ISE related, it UCCE - Rogger and Peripheral Gateway