Cisco Ise 13 User Guide

Procedure
Step 1ClickSetupAssistantintheupper-rightcorneroftheAdminportal.
Step 2Followtheon-screeninstructionstocompletetheconfiguration.
Setup Assistant Overwrites Previous Configurations
EachtimeyouruntheSetupAssistant,CiscoISEoverwritesprevioussettings,whichcancriticallyimpact
yourconfigurationinthefollowingways:
•Allauthentication,authorization,clientprovisioning,andposturepoliciesaredeletedandreplaced,
includinganythatyouaddedwithoutusingtheSetupAssistant....

Configure Network Access Service Page in Setup Assistant
User Authentication
Usersbelongingtothesegroupswillbegrantednetworkaccessasemployeesandbeallowedtocreateguest
accountsusingtheSponsorportal.
•Internalusers—Ifyouchoosetocreateaninternaluser,CiscoISEcreatesasingleuserusingthename
youenterandassignstheusertothedefaultEmployeeandALL_ACCOUNTSuseridentitygroups.
YoucanverifythisintheAdministration>IdentityManagement>Identities>Userspageafter
setupcompletes....

•CreateclientprovisioningpoliciesonthePolicy>ClientProvisioningpage.Clientprovisioning
policiescreatedbytheSetupAssistantincludetheprefixAutoGen,suchas:AutoGen_Provisioning.
•DownloadpostureupdatesfromtheAdministration>System>Settings>Posture>Updatespage.
•CreateposturepoliciesonthePolicy>Posturepage.PosturepoliciescreatedbytheSetupAssistant
includetheprefixAutoGen,suchas:AutoGen_Policy_Check_For_AS_Definition_Mac_Employee....

Web Portal Customizations
YoucanuploadanimagetouseasacustomlogofortheSponsor,Guest,andMyDevicesportals.CiscoISE
alsowilluploadtheimagetotheappropriatepage:
•Guestportals:GuestAccess>Configure>GuestPortals>Edit>PortalPageCustomization.
•Sponsorportals:GuestAccess>Configure>SponsorPortals>Edit>PortalPageCustomization
•Administration>DevicePortalManagement>MyDevices>Edit>PortalPageCustomization
Select Network Device Types Page in Setup Assistant
Switches and Wireless Controllers...

Data Filters in Listing Pages
Youcancustomizeandfiltertheinformationthatdisplaysinthelistingpagesusingthesettingsandfilter
icons.
Figure 3: Data Filters Example
Customize the Displayed Field Attributes
Youcancustomizethefieldattributesdisplayedinthelistingpages.Theavailableanddefaultoptionsvary
basedonthespecificlistingpage.
Procedure
Step 1ClicktheSettingsiconandchooseColumns.
Step 2Selecttheitemstoaddorremove.Acheckmarkdisplaysnexttotheselecteditems.
Step 3ClickClose.
Filter Data by Field Attributes...

Procedure
Step 1ClicktheShowdrop-downlistandchooseAdvancedFilter.
Step 2Specifysearchthesearchattributes,suchasfields,operators,andvaluesfromtheFiltermenus.
Step 3Click+toaddadditionalconditions.
Step 4ClickGotodisplaytheentriesthatmatchthespecifiedattributes.
Create Custom Filters
Youcancreateandsavecustomfiltersandmodifythefiltercriteriainpresetfilters.Customfiltersarenot
savedintheCiscoISEdatabase.Youcanonlyaccessthemusingthesamecomputerandbrowserusedto
createthem.
Procedure
Step...

Browser LocaleLanguage
nl-nlDutch
enEnglish
fr-frFrench
de-deGerman
hu-huHungarian
it-itItalian
ja-jpJapanese
ko-krKorean
pl-plPolish
pt-brPortuguese(Brazil)
ru-ruRussian
es-esSpanish
Support for UTF-8 Character Data Entry
CiscoISEfieldsthatareexposedtotheenduser(throughtheCiscoNACagent,orsupplicants,orthrough
theSponsor,Guest,MyDevices,andClientProvisioningportals)supportUTF-8charactersetsforalllanguages.
UTF-8isamultibyte-characterencodingfortheunicodecharacterset,whichincludesmanydifferentlanguage...

RSAdoesnotsupportUTF-8users,henceUTF-8authenticationwithRSAisnotsupported.Likewise,
RSAservers,whicharecompatiblewithCiscoISE,donotsupportUTF-8.
Note
UTF-8 Policies and Posture Assessment
PolicyrulesinCiscoISEthatareconditionedonattributevaluesmayincludeUTF-8text.Ruleevaluation
supportsUTF-8attributevalues.Inaddition,youcanconfigureconditionswithUTF-8valuesthroughthe
Administrativeportal.
PosturerequirementscanbemodifiedasFile,Application,andServiceconditionsbasedonaUTF-8character...

•ViewingtheCiscoISEdashboard
•Viewingalertinformation
•Viewingtcpdumpdata
UTF-8 Character Support in the Portals
ManymorecharactersetsaresupportedinCiscoISEfields(UTF-8)thanarecurrentlysupportedfor
localizationsinportalsandend-usermessages.Forexample,CiscoISEdoesnotsupportright-to-leftlanguages,
suchasHebreworArabic,eventhoughthecharactersetsthemselvesaresupported.
ThefollowingtableliststhefieldsintheAdminandend-userportalsthatsupportUTF-8charactersfordata
entryandviewing,withthefollowinglimitations:...

UTF-8 FieldsAdmin Portal Element
•Allfilterfields
•ValuesshownontheAdministratorListpage
•Valuesshownontheleftnavigationquickview
Administratorlist
•UsernameAdminloginpage
•Messages
•Prompts
RSA
•Authenticationtab>PromptRADIUStoken
•Name
•Remediationaction>MessageshowntoAgentUser
•Requirementlistdisplay
PostureRequirement
•Filecondition>Filepath
•Applicationcondition>Processname
•Servicecondition>Servicename
•Conditionslistdisplay
Postureconditions...