Cisco ISE Industrial Network Director (IND) IoT Profile Library v1.0

[Craig Hyps]

Please Read First

Before importing to a production ISE deployment, be sure you have read and understand the following conditions and caveats:

• This library contains approximately 11 new profiles. 

• This library is based on Profiler Version 4 compatible updates which ensures that only ISE deployments running ISE 2.4 and above can import the library.  This is due to the fact that profiles are based on the new pxGrid Probe introduced in ISE 2.4.
  
  
• Logical Profile creation:  ISE does not currently support import or API update of logical profiles.  Therefore, it is necessary to manually assign the new profiles to a new or existing logical profile.  Each of the profiles do have descriptions which can aid in deciding how to logically group the profiles.  Each profile can be a member of more than one logical profile. Logical profiles allow groups of devices to be distinguished in Context Visibility and facilitate the creation of policy rules based on logical groupings versus individual profiles.

Installation

To install, the IND endpoint profile library:

1. Download the Cisco ISE IND IoT Profile library ZIP file
2. Unzip the ZIP file on your local computer to get the XML file.
3. In ISE, navigate to Work Centers > Profiler > Profiling Policies
4. Click Import ()
   1. Click Browse...
   2. Choose the IND XML file
   3. Click on Submit.
5. Wait ~1 minute or less for the IND endpoint profiles to be imported!

Once the endpoint profiles are imported, you may view the list of IND devices by choosing Quick Filter and entering "IoT-" under the Profiling Policy Name header.  There will be two main categories:

• IoT-DeviceType - Corresponds to unique IND Device Types
  • Drive
  • Ethernet/IP Node
  • HMI
  • IO
  • PLC
  • Supervisor
  • Switch
• IoT-Protocol-Device - Corresponds to the unique IoT/OT Protocol used by the device
  • BACnet
  • CIP
  • Modbus
  • PROFINET