Cisco ISE Server

Cisco security management Product

 

Cisco ISE:

• Use for secure access management like ACS (Access Control Server)
• Security policy management platform
• Allow only Authorized users to access network based upon policy configured
• Main divided into two part, one is identity(NIC) another context(more additional information about user or device such as what, when, where and how they want to connect)
• Can be use as AAA server (Authentication, Authorization and Accounting)
• Mainly use for posturing(자세? 태도?) and policy complianc e checking of hosts in network
• Posturing check health of endpoints like antivirus, latest service pack and OS updates
• Cisco Identity Services Engine also provide profiling which dynamically identify endpoints
• profiling service identify, locate, and ensure the access of all endpoints connected
•  

 

What is AAA? 

Authentication
- 사용자가 네트워크 접속을 하기하기 전에 사용자의 신원 확인- 계정/패스워드, Challenge and Response, 암호화의 기능을 제공

Authorization
- 네트워크 접속이 허가된 사용자에게 사용가능한 접근권한 정의- 사용자의 권한 정보는 NAS나 원격의 AAA서버의 데이터베이스에 저장됨- One-time 인가, 서비스별 허가, 계정별 프로파일, 그룹별 허가 등의 접근제어 방법을 제공함

Accounting
- 사용자의 자원 사용에 대한 정보를 수집하여 과금, 감사, 보고서 기능을 제공- 사용자 계정 서비스 사용 시작시간/종료시간, 사용한 명령어, 네트워크 트래픽랑 등의 정보를 포함함

 

즉 identity service engine 이다. security policy 관리하고, AAA 인증 도와주고 뭐 그런 일 처리하는 Network Centuralized 시키기에 필요한 Server Compliance 인듯

 

 

Identity Stores:

• Identity store is a database that authenticate a user's or an endpoint's credentials
• Identity store could be an internal database that resides on the AAA server.
• also, could be an additional external database to connect
• support internal identity databases as well as external identity databases
• External identitysource == AD(Active Directory),LDAP,OTP servers, smart cards and CAs
• Internal user database for internal username and password accounts

 

Endpoint include all

• laptop
• printer
• phone
• and so many other endpoint which is required to be connected network
•  

 

show application status ise