ISE - jibingl/CCNA-CCNP GitHub Wiki

Cisco Identity Services Engine (ISE)

Feature Profiling Posture Assessment
Primary Goal Identify and classify the device type (e.g., medical device, printer, PC). Evaluate the health and security status of a device.
Mechanism Collects attributes via probes (DHCP, SNMP, RADIUS, HTTP). Checks for specific conditions (AV updates, OS patches, firewall status).
Requirements No software agent needed on the endpoint. Usually requires an agent like Cisco Secure Client or an agentless plugin.
Main Use Case Devices with no user or supplicant (IoT, Medical, Printers). Managed corporate assets (Laptops, Desktops, Cell-phones).
Outcome Assigns an Endpoint Profile (e.g., Cisco-IP-Phone). Determines a status: Compliant, Non-Compliant, or Unknown.