Cisco Identity Services Engine Software for SNS-3595-K9 Appliance

A critical component of any zero-trust strategy is securing the environment that everyone and everything is connecting to: the workplace. Cisco Identity Services Engine (ISE) enables a dynamic and automated approach to policy enforcement that empowers software-defined access and automated network segmentation within IT and OT environments. With ISE, you can see users and devices, controlling access across wired, wireless, and VPN connections to the corporate network.

Cisco ISE allows you to provide highly secure network access to users and devices. It helps you gain visibility into what is happening in your network, such as who is connected, which applications are installed and running, and much more. It also shares vital contextual data, such as user and device identities, threats, and vulnerabilities with integrated solutions from Cisco technology partners so that you can identify, contain, and remediate threats faster.

ISE works with network devices to create an all-encompassing contextual identity with attributes such as user, time, location, threat, vulnerability, and access type. This identity can be used to enforce a highly secure access policy that matches the identity’s business role. IT administrators can apply precise controls over who, what, when, where, and how endpoints are allowed on the network. ISE uses multiple mechanisms to enforce policy, including Cisco TrustSec software-defined segmentation.

Self-service device onboarding for the enterprise’s Bring-Your-Own-Device (BYOD) or guest policies allows users to manage devices according to the business policies defined by IT administrators. The IT staff will have the automated device provisioning, profiling, and posturing needed to comply with security policies. At the same time, employees can get their devices onto the network without requiring IT assistance.