ISE 2.3 Release

[thomas]

• Download
• Enabling the Cisco Software-Defined Access architecture
• Features
• Documents
• Videos
• Resources
• Public Resources
• Selling Resources

Download

Download the Cisco Identity Services Engine (ISE) 2.3 which was released on July 28, 2017.

You may also obtain an 90-day evaluation copy of the software from ISE Evaluations.

If you need more than 90 days, see How to Get ISE Evaluation Software & Licenses

Enabling the Cisco Software-Defined Access architecture

Now you can manage and automate your network - including policy and access - from a single dashboard with Cisco DNA Center. DNA Center is a holistic, end-to-end network management platform for the Network. Intuitive. Integrating ISE allows the DNA Center to define and enact policy to control access across the network, all from a unified interface. Cisco ISE 2.3 is a required integration component for the DNA Center, along with APIC-EM and the Network Data Platform, which all make up the Software-Defined Access solution.

Features

The need for robust access control that scales has never been greater. Rich visibility into who and what are on your network along with the ability to segment end-to-end using a software-defined approach are critical requirements of customers who are seeing an explosion of connected devices as well as a perpetual deluge of network breaches across every industry. Which is why the latest version of Cisco ISE doubles-down on outcomes that realize a secure digital network. It does this through enabling automation, administrative simplification, and net new capabilities.

ISE 2.3 offers DNA Center integration, new policy UI, enhanced posture, guest network login using Facebook credentials, read-only access, many ACS parity features, an Upgrade Readiness Tool and more! For additional details, see the ISE 2.3 Release Notes.

From the ISE 2.3 Release Notes:

• CoA Logging Enhancements
• Context Visibility Enhancements
• Enable MAR Cache Distribution
• Export Command Sets and Syslog Messages
• Guest Enhancements
  Guests will have the choice to log into the network using their Facebook credentials. This can be an option in addition to creating a local ISE account. Social login for guests provides seamless a guest experience that's an easy and fast way to allow guest access to the network.
• IPv6 Support for External ID Store Attributes
• Key Type for Certificate Public Key
• Migration Tool EnhancementsISE 2.3 includes the final suite of capabilities designed to reach feature parity with Cisco Secure Access Control System (ACS), allowing all existing ACS customers to migrate their deployment to ISE. New features include TACACS+-based device administration for IPv6, import and export capabilities for TACACS+-based command sets, policy export scheduling, IP range support in all octets, and more. See the ACS vs ISE Comparison for feature comparisons with every release of ISE.
• Network Device IP Address Range Support in all the Octets
• Node Registration Made Easy
• Policy Sets
  It is now easier to create and manage policies with the new policy interface. These simplified policy sets are more readable and include all of the authentication and authorization rules, and allow you to easily create and reuse conditions. After upgrading your policies will work as before, though additional policy sets have been created. See the video below for more information. The new policy UI now includes a hit counter for each policy set.
• Posture Enhancements
  ISE with AnyConnect now provides additional endpoint visibility, including BIOS-level details such as the computer’s serial number, USB attachments, and resource utilization, including disk and memory usage. ISE is now able to perform posture assessment on Windows and Mac OS endpoints without a persistent agent. This new approach replaces the existing web agent and makes use of a temporal agent, which has similar posture checks as the full AnyConnect secure mobility client but without required endpoint administrative privileges or reliance on browser plugins. Cisco continues to offer a wide range of posture agents to assist with different deployments. This includes the option for a stealth agent to display flexible notifications via OS messaging frameworks.
• RADIUS DTLS Client Identity Check
• Read-only Administrator SupportRead-only access allows network administrators to grant others access to review existing configurations, generate reports, and plan accordingly, without the right to make changes.
• Reports Export Summary
• Schedule Policy Export
• Security Settings Page Enhancements
• Support for Network Device with IPv6 Address
• Support for Network Device IP Address Range with Exclude Option
• Upgrade EnhancementsThe Upgrade Readiness Tool (URT) should be run prior to an ISE software upgrade in order to detect and fix any data upgrade issues. Most of the upgrade failures occur because of data upgrade issues and the URT is designed to validate the data before the actual upgrade. The URT will report and try to fix the issues, wherever possible. The URT is a separate download in the Cisco Software Center.

Documents

• Release Notes for Cisco Identity Services Engine, Release 2.3 - Cisco
• Cisco Identity Services Engine Network Component Compatibility, Release 2.3 - Cisco
• Cisco Identity Services Engine 2.3 Documentation Overview - Cisco
• Cisco Identity Services Engine Administrator Guide, Release 2.3 - Cisco
• Cisco Identity Services Engine Installation Guide, Release 2.3 - Cisco
• Cisco Identity Services Engine Upgrade Guide, Release 2.3 - Cisco
• User Guide for Cisco Secure ACS to Cisco ISE Migration Tool, Release 2.3 - Cisco
• Sponsor Portal User Guide for Cisco Identity Services Engine, Release 2.3 - Cisco
• Cisco Identity Services Engine CLI Reference Guide, Release 2.3 - Cisco
• Cisco Identity Services Engine API Reference Guide, Release 2.x - Cisco
• https://www.cisco.com/c/dam/en/us/td/docs/security/ise/2-3/open_source/Cisco_Identity_Services_Engine_2_3.pdf
• User Guide for Cisco Secure ACS to Cisco ISE Migration Tool, Release 2.3 - Cisco
• Guest Login with Facebook
  • How to Configure & Use a Facebook Social Media Login on ISE
  • Cisco ISE Guest Social Media Login FAQ

Videos

See our Cisco ISE YouTube Channel for these videos and many more!

• Cisco ISE 2 3 Policy User Interface Walkthrough - YouTube
• Cisco ISE 2.3 Guest Login with Facebook - YouTube

Resources

You may also want to see ISE 2.3 What's New [Powerpoint]

Public Resources

• ISE Public Community: http://cs.co/ise-community | Questions
• ISE Compatibility Guides: http://cs.co/ise-compatibility
• ISE Design & Integration Guides: http://cs.co/ise-guides | http://cs.co/ise-howtos
• ISE Licensing & Ordering Guide: http://cs.co/ise-licensing
• Customer Connection Program: http://cisco.com/go/ccp > Security CCP
• Cisco Medical NAC: http://cs.co/medical-nac
• ISE Evaluations: http://cs.co/ise-eval
• ISE YouTube Channel: http://cs.co/ise-videos
• ACS to ISE Migration: http://cs.co/acstoise
• ISE Passive Identity Connector (PIC) Community: http://cs.co/ise-pic
• ISE Performance and Scale: https://communities.cisco.com/docs/DOC-68347

Selling Resources

For Cisco Partners and Sales Engineers

• Selling ISE: http://cs.co/selling-ise
• ISE Instant Demo: http://cs.co/ise-instant-demo
• ISE Demos & PoVs: http://cs.co/selling-ise-demos
• ISE Sales Training: http://cs.co/selling-ise-training

[-Warren]

@thomas This is excellent. Thank you!