ISE

[miracle_david@yahoo.com]

Hi gentlemen,

What do these terms do?   1. dot1x    2. Posture Assessment

Can FirePower do what ISE does?

Thanks

[Rob Ingram]

Hi,

802.1X is used to authenticate devices/users to a wired or wireless network.

https://en.wikipedia.org/wiki/IEEE_802.1X

Posture assessment is used in ISE to determine the state of a device, for example whether it is running Anti-Virus, Anti-Malware or Personal firewall before permitted access to the network.

https://community.cisco.com/t5/security-documents/ise-posture-prescriptive-deployment-guide/ta-p/3680273

No Firepower is a Firewall, this is a separate solution to ISE, it does not perform 802.1x authentication.

HTH

[miracle_david@yahoo.com]

Thanks for your great reply. Is there any similarity between "Posture Assessment" & "dot1x"? Which one is more complex to deploy? Which one has more stricter features for security?
What does Client Provisioning do?

[Rob Ingram · Accepted solution]

It's probably a matter of opinon and experience on which is more complex to configure. Posture assessment is more secure, it is usually configured to compliment 802.1x. Without 802.1x you authenticate the user to the network, combine that with posture assessment you determine whether the user is authenticating to the network using a laptop that complies with the organisation's security policy (i.e. is AV, AM or FW installed and running).

Refer to the Posture configuration guide for more information.

https://community.cisco.com/t5/security-documents/ise-posture-prescriptive-deployment-guide/ta-p/3680273

Client provisioning is used to deploy the agent to the connecting devices.

HTH

[thomas]

Since you are new to ISE and access control, I would recommend watching some of our past ISE Webinars that cover these topics:

•  ISE Secure Wired Access Webinar  (802.1X is at 17:00)
• Posture and Compliance Webinar

[miracle_david@yahoo.com]

Hi sir, I'm very gratitude & grateful for sharing webinars & considering my query. If you have other webinars regarding security like FirePower or other ISE features I'd be glad to watch them.
God bless you!