Cisco Ise 13 User Guide
Here you can view all the pages of manual Cisco Ise 13 User Guide. The Cisco manuals for Interface are available online for free. You can easily download all the documents as PDF.
Page 71
UTF-8 FieldsAdmin Portal Element •Operations>LiveAuthentications>Filterfields •Operations>Reports>Catalog>Reportfilterfields Operations>Reports •GeneralTools>RADIUSAuthenticationTroubleshooting> Username Operations>Troubleshoot •Authentication>valuefortheavexpressionwithinpolicy conditions •Authorization/posture/clientprovisioning>otherconditions >valuefortheavexpressionwithinpolicyconditions Policies •Authentication>simplecondition/compoundcondition>value fortheavexpression...
Page 72
thatisprovidedduringmigrationasunreadableusingAdministrativeportalorreportmethods.Youmust convertunreadableUTF-8values(thataremigratedfromACS)intoASCIItext.Formoreinformationabout migratingfromACStoISE,seetheISEMigrationGuidehttp://www.cisco.com/c/en/us/td/docs/security/ise/ 2-1/migration_guide/b_ise_MigrationGuide21.html. Related Topics http://www.cisco.com/c/en/us/td/docs/security/ise/2-2/migration_guide/b_acs_ise_MigrationTool_UG_22.html Support for Importing and Exporting UTF-8 Values...
Page 73
ForthefollowingISEwindows,youshouldprovidefullMACaddress(sixoctetsseparatedby‘:’or‘-’or‘.’): •Operations>EndpointProtectionServices •Operations>Troubleshooting>DiagnosticTools>GeneralTools>RADIUSAuthentication Troubleshooting •Operations>Troubleshooting>DiagnosticTools>GeneralTools>PostureTroubleshooting •Administration>Identities>Endpoints •Administration>System>Deployment •Administration>Logging>CollectionFilter RESTAPIsalsosupportnormalizationoffullMACaddress. Validoctetcancontainonly0-9,a-forA-F....
Page 74
Cisco Identity Services Engine Administrator Guide, Release 1.3 28 Admin Features Limited by Role-Based Access Control Policies
Page 75
PART II Deploy Cisco ISE Nodes •SetUpCiscoISEinaDistributedEnvironment,page31 •SetUpInlinePosture,page55
Page 76
Page 77
CHAPTER 3 Set Up Cisco ISE in a Distributed Environment •CiscoISEDeploymentTerminology,page31 •PersonasinDistributedCiscoISEDeployments,page32 •CiscoISEDistributedDeployment,page32 •ConfigureaCiscoISENode,page35 •AdministrationNode,page38 •PolicyServiceNode,page40 •MonitoringNode,page41 •pxGridNode,page43 •ISEpxGridIdentityMapping,page45 •InlinePostureNode,page47 •ViewNodesinaDeployment,page48 •SynchronizePrimaryandSecondaryCiscoISENodes,page49 •ChangeNodePersonasandServices,page49...
Page 78
•Service—Aserviceisaspecificfeaturethatapersonaprovidessuchasnetworkaccess,profiler,posture, securitygroupaccess,monitoringandtroubleshooting,andsoon. •Node—AnodeisanindividualinstancethatrunstheCiscoISEsoftware.CiscoISEisavailableasan applianceandalsoasasoftwarethatcanberunonVMware.Eachinstance,applianceorVMwarethat runstheCiscoISEsoftwareiscalledanode. •Persona—Thepersonaorpersonasofanodedeterminetheservicesprovidedbyanode.ACiscoISE...
Page 79
taskofdefiningpersonasonthePrimaryPAN,youcanthenregisterothersecondarynodestothePrimary PANanddefinepersonasforthesecondarynodes. AllCiscoISEsystemandfunctionality-relatedconfigurationsshouldbedoneonlyonthePrimaryPAN.The configurationchangesthatyouperformonthePrimaryPANarereplicatedtoallthesecondarynodesinyour deployment. TheremustbeatleastoneMonitoringnodeinadistributeddeployment.Atthetimeofconfiguringyour PrimaryPAN,youmustenabletheMonitoringpersona.AfteryouregisteraMonitoringnodeinyour...
Page 80
•ConfiguretheCiscoISEAdminpasswordwhenyouinstallCiscoISE.ThepreviousCiscoISEAdmin defaultlogincredentials(admin/cisco)arenolongervalid.Usetheusernameandpasswordthatwas createdduringtheinitialsetuporthecurrentpasswordifitwaschangedlater. •ConfiguretheDomainNameSystem(DNS)server.EntertheIPaddressesandfullyqualifieddomain names(FQDNs)ofalltheCiscoISEnodesthatarepartofyourdistributeddeploymentintheDNS server.Otherwise,noderegistrationwillfail....