Cisco Ise 13 User Guide
Here you can view all the pages of manual Cisco Ise 13 User Guide. The Cisco manuals for Interface are available online for free. You can easily download all the documents as PDF.
Page 721
Logging CategoryDescriptionReport Name AdministrativeandOperationalauditTheUserChangePasswordAudit reportdisplaysverificationabout employee'spasswordchanges. UserChangePassword Audit PostureandClientProvisioningAuditTheSupplicantProvisioning reportprovidesdetailsaboutthe supplicantsprovisionedto employee'spersonaldevices. SupplicantProvisioning —TheRegisteredEndpointsreport displaysallpersonaldevices registeredbyemployees. RegisteredEndpoints ChooseAdministration>System>Logging...
Page 722
Logging CategoryDescriptionReport Name ChooseAdministration>System>Logging >LoggingCategoriesandselectPassed Authentications. TheMasterGuestReport combinesdatafromvariousGuest Accessreportsandenablesyouto exportdatafromdifferent reportingsources.TheMaster Guestreportalsoprovidesdetails aboutthewebsitesthatguestusers arevisiting.Youcanusethis reportforsecurityauditing purposestodemonstratewhen guestusersaccessedthenetwork andwhattheydidonit. YoumustalsoenableHTTP inspectiononthenetworkaccess...
Page 723
Logging CategoryDescriptionReport Name —TheRBACLDropSummary reportisspecifictotheTrustSec feature,whichisavailableonly withanAdvancedCiscoISE license. Thisreportalsorequiresthatyou configurethenetworkdevicesto sendNetFloweventsfordropped eventstoCiscoISE. Ifauserviolatesaparticular policyoraccess,packetsare droppedandindicatedinthis report. RBACLDropSummary —TheTopNRBACLDropsBy Userreportisspecifictothe TrustSecfeature,whichis availableonlywithanAdvanced CiscoISElicense. Thisreportalsorequiresthatyou...
Page 724
Cisco Identity Services Engine Administrator Guide, Release 1.3 678 Available Reports
Page 725
PART VII Reference •AdministrationUserInterfaceReference,page681 •GuestAccessUserInterfaceReference,page769 •WebPortalsCustomizationReference,page801 •PolicyUserInterfaceReference,page815 •OperationsUserInterfaceReference,page857 •NetworkAccessFlows,page871 •SwitchandWirelessLANControllerConfigurationRequiredtoSupportCiscoISEFunctions,page 879 •SupportedManagementInformationBasesinCiscoISE,page891
Page 726
Page 727
CHAPTER 27 Administration User Interface Reference •SystemAdministration,page681 •IdentityManagement,page724 •NetworkResources,page738 •DevicePortalManagement,page752 System Administration Deployment Settings TheDeploymentNodespageenablesyoutoconfigureCiscoISE(Administration,PolicyService,and Monitoring)nodesandInlinePosturenodesandtosetupadeployment. Deployment Nodes List Page ThefollowingtabledescribesthefieldsontheDeploymentNodesListpage,whichyoucanusetoconfigure...
Page 728
Usage GuidelinesFields Indicatestherole(primary,secondary,orstandalone)thattheAdministrationand Monitoringpersonashaveassumed,ifthesepersonasareenabledonthisnode.Therole canbeanyoneormoreofthefollowing: •PRI(A)—ReferstothePrimaryPAN •SEC(A)—ReferstotheSecondaryPAN •PRI(M)—ReferstothePrimaryMonitoringNode •SEC(M)—ReferstotheSecondaryMonitoringNode Role (OnlyappearsifthePolicyServicepersonaisenabled)Liststheservicesthatrunonthis CiscoISEnode.Servicescanincludeanyoneofthefollowing: •Session •Profiling •All...
Page 729
Table 56: General Node Settings Usage GuidelinesFields DisplaysthehostnameoftheCiscoISEnode.Hostname DisplaysthefullyqualifieddomainnameoftheCiscoISEnode.Forexample, ise1.cisco.com. FQDN DisplaystheIPaddressoftheCiscoISEnode.IPAddress Displaysthenodetype.Couldbeanyoneofthefollowing:IdentityServicesEngine (ISE),InlinePostureNode NodeType Personas CheckthischeckboxifyouwantaCiscoISEnodetoassumetheAdministrationpersona. YoucanenabletheAdministrationpersonaonlyonnodesthatarelicensedtoprovide...
Page 730
Usage GuidelinesFields CheckthischeckboxifyouwantaCiscoISEnodetoassumetheMonitoringpersona andfunctionasyourlogcollector.TheremustbeatleastoneMonitoringnodeina distributeddeployment.AtthetimeofconfiguringyourPrimaryPAN,youmustenable theMonitoringpersona.AfteryouregisterasecondaryMonitoringnodeinyour deployment,youcaneditthePrimaryPANanddisabletheMonitoringpersona,if required.ToconfigureaCiscoISEnodeonaVMwareplatformasyourlogcollector,...