Deploy and manage Cisco Identity Services Engine for enterprise-grade 802.1X authentication, posture assessment, and dynamic network segmentation.
This skill provides a comprehensive framework for implementing Cisco ISE to secure wired and wireless networks. It covers end-to-end workflows including Active Directory integration, 802.1X authentication (EAP-TLS/PEAP), and MAC Authentication Bypass (MAB). By utilizing this skill, security engineers can automate the deployment of dynamic authorization policies, including VLAN assignments, Downloadable ACLs (dACLs), and TrustSec Security Group Tags (SGTs), while ensuring endpoint compliance through rigorous posture assessment and remediation.
주요 기능
01Active Directory integration and identity source sequencing
02Dynamic VLAN assignment and TrustSec (SGT) segmentation
03Security posture assessment and automated remediation workflows
044,121 GitHub stars
05Step-by-step RADIUS and CoA (Change of Authorization) setup
06Comprehensive 802.1X and MAB configuration for Cisco Catalyst switches
사용 사례
01Ensuring endpoint compliance through posture checks and automated remediation
02Automating guest access and BYOD onboarding processes
03Deploying a Zero Trust network access model in enterprise environments
