ISE - jibingl/CCNA-CCNP GitHub Wiki
Cisco Identity Services Engine (ISE)
| Feature | Profiling | Posture Assessment |
|---|---|---|
| Primary Goal | Identify and classify the device type (e.g., medical device, printer, PC). | Evaluate the health and security status of a device. |
| Mechanism | Collects attributes via probes (DHCP, SNMP, RADIUS, HTTP). | Checks for specific conditions (AV updates, OS patches, firewall status). |
| Requirements | No software agent needed on the endpoint. | Usually requires an agent like Cisco Secure Client or an agentless plugin. |
| Main Use Case | Devices with no user or supplicant (IoT, Medical, Printers). | Managed corporate assets (Laptops, Desktops, Cell-phones). |
| Outcome | Assigns an Endpoint Profile (e.g., Cisco-IP-Phone). | Determines a status: Compliant, Non-Compliant, or Unknown. |