Limiting ISE Management Access

[Leroy Plock]

Greetings,

Q1: Is there any way to limit access to the ISE management functionality to a specific physical interface on the appliance?

Q2: If the answer to Q1 is no, I see that we can limit access to specific IP ranges. If we do this, does it apply to the CLI as well as the web gui?

Thanks.

[jan.nielsen]

Yes,it is how it works by default. Only gigabitethernet 0 can be used for management of ISE, other services like guest, can be moved to other interfaces.

[Leroy Plock]

That's good news, thank you.

[Venkatesh Attuluri]

Cisco ISE management is restricted to Gigabit Ethernet 0.

Cisco ISE Appliance Ports Reference

http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/installation_guide/ise_ig/ise_app_c-ports.html