Product

About the Cisco Identity Services Engine

Cisco Identity Services Engine (ISE) is a powerful, policy-based network access control (NAC) platform that enables organizations to enforce security policies, ensure endpoint compliance, and manage network access for users, devices (including IoT and BYOD), and applications. It acts as a central policy plane across wired, wireless, and VPN connections. ISE combines multiple services including authentication, authorization, and accounting (AAA) using protocols like 802.1X, MAC Authentication Bypass (MAB), and web authentication. Key features include device profiling and classification, posture assessment and remediation (using Cisco AnyConnect Agent), guest access management, user and device contextual data sharing via Cisco pxGrid, network segmentation (Security Group Tags), and TACACS+ for network device administration. ISE aims to enhance security, simplify operations, and provide granular control over who can access what on the network, helping to reduce risk and contain threats.