Cisco ISE helps to protect networks from cyber attacks using the following features :
Access control : Provides users with access control options that include downloadable ACLs, virtual LAN, URL redirections and security group ACLs.
Centralized management : This enables administrators to configure, manage and authenticate users and devices in one location.
Cisco DNA Center integration : This network controller and management dashboard can integrate with ISE to act as an analytics platform for networks. DNA Center can also aid in the design, provisioning and application of policies. These policies can then be applied to users and applications instead of network devices.
Contextual identity and business policies : These policies include authentication, device identity, posture validation, as well as user and endpoint identity attributes.
Cisco TrustSec and Group-Based Policy : This includes a segmentation controller that manages switch, router, wireless and firewall rules.
Device profiling : Cisco Identity Services Engine can create custom device templates that automatically detect, classify and associate administration identities.
Monitoring and troubleshooting : ISE users can access a web console for monitoring, reporting and troubleshooting.
