Cisco Identity Services Engine (ISE): End-to-End Access Control

In today's borderless enterprise environments, identity-based access control is only as strong as its weakest integration point. This guide moves beyond basic configuration steps to deliver the strategic reasoning behind design decisions, scaling, and policy structure. Grounded in years of real-world experience, it equips you to design, deploy, and troubleshoot Cisco Identity Services Engine (ISE) from small campus environments to massive multi-site architectures.

Key Topics Covered:

• Hybrid & Cloud Deployments: Master core ISE deployment principles, sizing, high availability, and cloud models across AWS, Azure, and OCI.
• Advanced Policy Sets: Structure authentication and authorization options, including certificate-based access, MFA, and external identity sources.
• Micro-Segmentation & TrustSec: Implement Cisco TrustSec across campus networks, WAN/SD-WAN, and data center policy interconnects.
• Device Profiling and Posture: Leverage Multi-Factor Classification, Cloud MFC Profiling, guest access, and posture services.
• Ecosystem Integration: Extend consistent, identity-driven policy across Meraki environments with Meraki Adaptive Policy, remote access, SSE, and multicloud workloads.

Whether you are securing traditional on-premises networks or complex hybrid infrastructures, this book provides the expert-level knowledge required to enforce consistent Zero Trust policy everywhere.

Table of Contents

1      Introduction to Modern Access Control  (JE)

2      ISE Deployment Principles (EK)

3      Implementing ISE in Hybrid Infrastructure  (EK)

4      Policy Set Concepts  (EK)

5      Authentication Options (EK)

6      Authorization Options  (EK)

7      Introduction to TrustSec (JE)

8      Device Identification for Access Management

9      Managing Guest Users and Personal Devices (SK)

10    Implementing Endpoint Posture Services  (SK)

11    Managing Network Access in the Meraki Environment  (SK)

12    Meraki Adaptive Policy (SK)

13    Remote Access Management for On-Prem and SSE (SK)

14    Managing Network Access on Campus with Microsegmentation  (JE)

15    Extending Microsegmentation to WAN and SD-WAN  (JE)

16    Building Policy-Interconnect with Data Center (JE)

17    Classifying Cloud Workloads (JE)

18    ISE APIs and Advanced Automation Use Cases (EK)

19    Integrating Your Security Products to Enhance Context Using pxGrid (JE)

20    Troubleshooting, Monitoring, Alerting, and System 360 (EK)

21    ISE Maintenance  (EK)

Submit Errata