This is the IEEE 802.1X standard for port-based network access control, where a supplicant authenticates to an authenticator (switch/WLC) against ISE as the RADIUS server. SISE covers 802.1X as the primary wired/wireless authentication method.
Cisco Identity Services Engine (ISE) is the policy platform that provides authentication, authorization, and accounting plus profiling, posture, and guest services for network access control.
This is the IEEE 802.
MAC Authentication Bypass (MAB) authenticates endpoints that cannot do 802.
RADIUS is the AAA protocol ISE uses to authenticate and authorize network access requests from switches, WLCs, and VPN devices.
Change of Authorization (CoA) lets ISE dynamically change or terminate an active session — for reauthentication, posture remediation, or quarantine — without the endpoint reconnecting.
Cisco TrustSec enforces software-defined segmentation using Security Group Tags (SGTs) assigned by ISE instead of IP-based ACLs.
A Security Group Tag (SGT) is a label ISE assigns to a session that downstream devices use to enforce TrustSec segmentation policy.
The ISE Profiler classifies connected endpoints by type (phone, printer, camera, etc.
Posture assessment checks that an endpoint meets compliance requirements (patches, antivirus, configuration) before granting full access, using the AnyConnect/Secure Client posture module.
Cisco Secure Client (formerly AnyConnect) provides the supplicant and posture agent that interact with ISE for authentication and compliance.
Bring Your Own Device (BYOD) is the ISE workflow that onboards personal devices with certificate provisioning and My Devices self-service.
Guest Services in ISE provide web authentication and sponsored or self-registered guest access through customizable portals.
Web Authentication redirects unauthenticated users to an ISE portal to sign in via a browser, used for guests and as a fallback.
TACACS+ is the AAA protocol ISE uses for device administration, providing granular command authorization and accounting for network device logins.
Cisco Platform Exchange Grid (pxGrid) is the framework ISE uses to share contextual identity and session information with other security products.