Cisco Identity Services Engine

Cisco Identity Services Engine (ISE) is an enterprise network access control (NAC) and security policy management platform engineered to automate endpoint discovery, enforce identity-based access control, and implement software-defined network segmentation across enterprise wired, wireless, and VPN infrastructures. Serving as the central policy control point for enterprise Zero Trust workplace architectures, Cisco ISE ensures that only compliant, authorized users and devices are granted access to sensitive enterprise network resources.

Architecturally, Cisco ISE deploys as a distributed physical or virtual appliance cluster running on dedicated hardware, VMware ESXi, KVM, or public cloud environments including AWS and Microsoft Azure. ISE communicates with network infrastructure devices using standard 802.1X, RADIUS, TACACS+, and pxGrid protocols. The platform continuously profiles connected devices—including laptops, mobile phones, printers, medical equipment, and IoT sensors—evaluating device identity, endpoint posture (antivirus status and OS patches), and physical location before applying dynamic access permissions via downloadable access control lists (dACLs) or TrustSec Security Group Tags (SGTs). Cisco ISE integrates natively with Cisco Catalyst Center, Cisco Cyber Vision, Cisco Secure Client, and third-party SIEM/SOAR platforms.

Enterprise use cases include automated enterprise guest onboarding, BYOD device management, zero-trust network micro-segmentation, compliance posture validation, and automated threat containment via pxGrid. Cisco ISE provides organizations with the visibility and control needed to secure enterprise networks.