ISE
Cisco Identity Services Engine (ISE) is the policy platform that provides authentication, authorization, and accounting plus profiling, posture, and guest services for network access control. SISE is entirely about deploying and configuring ISE.
All 300-715 Terms
ISE
Cisco Identity Services Engine (ISE) is the policy platform that provides authentication, authorization, and accounting plus profiling, posture, and guest services for network access control.
802.1X
This is the IEEE 802.
MAB
MAC Authentication Bypass (MAB) authenticates endpoints that cannot do 802.
RADIUS
RADIUS is the AAA protocol ISE uses to authenticate and authorize network access requests from switches, WLCs, and VPN devices.
CoA
Change of Authorization (CoA) lets ISE dynamically change or terminate an active session — for reauthentication, posture remediation, or quarantine — without the endpoint reconnecting.
TrustSec
Cisco TrustSec enforces software-defined segmentation using Security Group Tags (SGTs) assigned by ISE instead of IP-based ACLs.
SGT
A Security Group Tag (SGT) is a label ISE assigns to a session that downstream devices use to enforce TrustSec segmentation policy.
Profiler
The ISE Profiler classifies connected endpoints by type (phone, printer, camera, etc.
Posture
Posture assessment checks that an endpoint meets compliance requirements (patches, antivirus, configuration) before granting full access, using the AnyConnect/Secure Client posture module.
Secure Client
Cisco Secure Client (formerly AnyConnect) provides the supplicant and posture agent that interact with ISE for authentication and compliance.
BYOD
Bring Your Own Device (BYOD) is the ISE workflow that onboards personal devices with certificate provisioning and My Devices self-service.
Guest Services
Guest Services in ISE provide web authentication and sponsored or self-registered guest access through customizable portals.
Web Authentication
Web Authentication redirects unauthenticated users to an ISE portal to sign in via a browser, used for guests and as a fallback.
TACACS+
TACACS+ is the AAA protocol ISE uses for device administration, providing granular command authorization and accounting for network device logins.
pxGrid
Cisco Platform Exchange Grid (pxGrid) is the framework ISE uses to share contextual identity and session information with other security products.