Cisco Ise 13 User Guide

Synchronize an Inline Posture Node
Whenanodeinahigh-availabilitypairisdownandconfigurationchangesaremadetothesingleactivenode,
thereisnomechanismthatautomaticallypopulatesthefailednodewiththenewconfigurationwhenitcomes
backup.TheSync-upPeerNodebuttonthatappearsintheInlinePosturehigh-availabilityuserinterfaceon
theactivenode,allowsyoutomanuallysynchronizethestandbynodewiththelatestInlinePosturedatabase
fromtheactivenode.
Before You Begin
•YoumustbeaSuperAdminorSystemAdmin....

Step 5EnteraModelNameandSoftwareVersion,asnecessary.
Step 6FortheNetworkDeviceGroup,specifyaLocationandDeviceType,asnecessary.
Step 7ChecktheAuthenticationSettingscheckbox,andentertheRADIUSsharedsecretinformation.
Step 8ClickSave.
Remove an Inline Posture Node from Deployment
ToremoveanInlinePosturenodefromadeployment,youmustfirstchangeitsdeploymenttomaintenance
modeandthenderegisterit.Maintenancemodeisaneutralstatethatallowsthenodetosmoothlytransition
tothenetworkorfromadeployment.
Before You Begin...

Whenyouhoveryourmousecursoroverthehealthicon,aquickviewdialogappearsshowingdetailed
informationonsystemhealth.
Figure 10: System Summary Quick View Status
Remote Access VPN Use Case
ThissectiondescribeshowtouseanInlinePosturenodewithaVPNdevicesuchasASAinaCiscoISE
network.ThefollowingfigureshowsaCiscoISEdeploymentthatusesanInlinePosturenodeforremote
VPNaccess.ThetermiPEPinthisillustrationreferstotheInlinePosturenodeandPDPreferstothePolicy...

7IftheauthorizationpolicydeterminesthattheendpointisNonCompliantwiththeposturepolicy,orifthe
posturestatusisUnknown,thenthePolicyServicenodereturnsaURLredirectattributevaluetotheInline
PosturenodealongwithaDACLtospecifythetraffictobeallowed.AllHTTP/HTTPStrafficdeniedby
theDACLisredirectedtothespecifiedURL.
8WhentheposturebecomesCompliant,areauthorizationoccursandthePolicyServicenodesendsanew
DACLtotheInlinePosturenode,whichprovidestheuserprivilegedaccesstotheinternalnetwork.
Configure an Inline Posture...

%Creatinglogbackupwithtimestampedfilename:myipeplogs-110317-1836.tar.gz
CollectingInlinePosturenodelogsremotelyfromthePrimaryAdministrationUIisnotsupported.Note
Kclick process in Inline Posture Node
Clickkernelmoduleprocess,calledaskclickownsCPUschedulinginInlinePosturenode.Kclickprovides
theCPUcyclesforotherprocessesthatrequestit.Duetothisthe'top'outputatanInlinePostureNodedisplays
thekclickusingalltheCPUcyclesinthesystemincludingidlecycles.
Cisco Identity Services Engine Administrator Guide,...

   Cisco Identity Services Engine Administrator Guide, Release 1.3
80
Kclick process in Inline Posture Node 

PART III
Setup Cisco ISE Management Access
•AdministerCiscoISE,page83
•ManageAdministratorsandAdminAccessPolicies,page97
•CiscoISELicenses,page119
•ManageCertificates,page127
•ManageNetworkDevices,page173
•ManageResources,page197
•LoggingMechanism,page201
•BackupandRestoreOperations,page213
•SetupEndpointProtectionService,page231 

CHAPTER 5
Administer Cisco ISE
•LogintoCiscoISE,page83
•SpecifyProxySettingsinCiscoISE,page84
•PortsUsedbytheAdminPortal,page85
•EnableExternalRESTfulServicesAPIs,page85
•ExternalRESTfulServicesSDK,page86
•SpecifySystemTimeandNTPServerSettings,page86
•ChangetheSystemTimeZone,page87
•ConfigureSMTPServertoSupportNotifications,page88
•InstallaSoftwarePatch,page88
•RollBackSoftwarePatches,page90
•ViewPatchInstallandRollbackChanges,page91
•FIPSModeSupport,page91...

Procedure
Step 1EntertheCiscoISEURLintheaddressbarofyourbrowser(forexample,https:///admin/).
Step 2Entertheusernameandcase-sensitivepassword,thatwasspecifiedandconfiguredduringtheinitialCiscoISE
setup.
Step 3ClickLoginorpressEnter.
Ifyourloginisunsuccessful,clicktheProblemloggingin?linkintheLoginpageandfollowtheinstructions.
Administrator Login Browser Support
TheCiscoISEAdminportalsupportsthefollowingHTTPS-enabledbrowsers:
•MozillaFirefoxversions31.xESR,32.x,and33.x...