Cisco Identity Services Engine (ISE)

Cisco ISE creates a unified security ecosystem. We used across departments to enforce consistent access policies.
We are also managing guest WIFI using Cisco ISE. It provides customizable portals. Keeping guest traffic isolated from internal resources.
We are also using it for profiling & posturing of network devices

FortiNAC

Cisco Catalyst Center, Cisco Industrial Wireless Access Points, Cisco Secure Firewall

We use it for Wi-Fi authentication in a large higher education and healthcare environment. We do PEAP and EAP-TLS authentication.

CloudPATH, FreeRADIUS

We advise customers on adopt ISE to automize the segmentation of the networks, increase the security level, be compliant with EU regulations like DORA or NIS2. Since It can automatically put user devices into their own networks subject to well defined policies. It is part of the Zero Trust ecosystem and can help on keeping the cyber defense secure during the time due to the posture checks.

HPE Aruba Networking ClearPass Policy Manager and FortiNAC

Cisco Secure Connect, Cisco Meraki MR Wireless Access Points, Cisco Meraki MS

Cisco Identity Services Engine is an integral part of securing wireless and wired networks. I use Cisco Identity Services Engine primarily as a partner/consultant to secure K12 and SLED customers. These customers almost always have a universal need to tighten security for their corporate devices to verify that no one unauthorized can connect. The guest redirection feature is really useful and easy to setup, especially if the wireless environement is already a 9800 or meraki WLC. The beauty of Cisco Identity Services Engine is it really is a Swiss Army knife. Depending on the business need, you select the use case and work center and follow the flow of configuration. It may seem intimidating at first but there is really good documentation and community resources for all types of scenarios and networks. Cisco Identity Services Engine can be rolled out in phases depending on the comfort level of the implementation team, making it a lot more flexible than something like a firewall that requires tearing out the old and putting a new device in. Overall, I think Cisco Identity Services Engine is a flagship NAC solution and is a no brainer as the next step in securing any wireless and wired network.

We use Cisco Identity Services Engine for authentication for all our endpoints and network devices, we also use it for guest wireless connectivity. Currently, the product doesn't face any problems, but we are looking into integrating it with the Catalyst Center. We also are aware that our appliances are about to end of life on 2026 and we need to look for what to do if get them virtual or get them physical. I would like some advice.

Cisco Catalyst Center

Cisco Catalyst Center, Cisco Firepower 1000 Series, Cisco Catalyst 9800 Series Wireless Controllers