ISE management

[rbonte]

Looking for details on how best to manage or monitor ISE as it’s used in TrustSec implementations.  Recommended management tools?

[Timothy Abbott]

Hi,

There currently aren't any off-box tools available to manage an ISE deployment.  However, you can built a custom application using REST APIs to make changes or retrieve information from the deployment.  As for monitoring, ISE can be monitored remotely via SNMP.  There are many tools available from vendors for SNMP monitoring.  Is that what you are looking for?

Regards,

-Tim

[hariholla · Accepted solution]

Cisco ISE is the control and management interface for Cisco TrustSec in general. Starting from ISE 2.0, TrustSec work center consolidates all the TrustSec management options along with monitoring, see screenshot below. In addition to Tim's comment, Cisco Prime infrastructure can be used to configure Enterprise networks with custom templates (for AAA, 802.1X, etc.). NetFlow analyzers like Cisco StealthWatch can be used to monitor network activity based on TrustSec Security Group Tag:

https://www.lancope.com/resources/videos/stealthwatch-cisco-trustsec-walkthrough

Hope this helps,

-Hari

[hariholla]

Just an additional point. Starting from Cisco Prime Infrastructure 3.1, we can now assess the network for TrustSec readiness. Screenshot below:

[jakub.kacer]

Hi,

check out this application for an ISE Management system:

https://www.xtendise.com/

Jakub