ISE Inbuilt Nessus Port Scanner

[jmcgourt@cisco.com]

My customer would like to see details of what aspects of the Nessus port scanner are included with ISE 2.4 'out of the box'.  I believe ISE has an element of Nessus built in, but then there is also the ability to fully integrate Nessus via PXGrid for the Rapid Threat Containment solution.  They specifically would like information on what aspects of Nessus are included out of the box - not the full PXGrid integration. Can you please provide some information to answer this?

[howon · Accepted solution]

There are no Nessus features out of the box. ISE comes with NMAP which is used for profiling purposes.

You may be referring to the previous solution, NAC Appliance, used to have Nessus feature built in for posture, but the same feature was never implemented in ISE until the introduction of Threat Centric NAC (TC-NAC). But even with TC-NAC, the Nessus scanner is not part of the ISE distribution and requires external scanner.

[Francesco Molino]

Hi
As Howon said there's no Nessus scanner feature included in ISE out of the box.
The integration, as you said, goes over tcnac and works like a charm.