Getting Started with ISE Profiling

Cisco ISE Product Manager, Matt Gordon, and TME, Thomas Howard, provide an overview of the current Profiling capabilities.

00:00 Intro & Agenda
00:35 Unknowns ... to Knowns ... to Classified
01:30 Audience Poll Questions
07:15 Organizational vs Behavioral Endpoint Source
08:35 Static Endpoint Groups, Endpoint Custom Attributes, and ISE pxGrid Direct with CMDBs
10:23 ISE Visibility Setup Wizard
10:54 ISE Context Visibility
11:38 Profiling : Sources ▹ Attributes ▹ Profiles ▹ Authorization Profiles ▹ Segmentation
15:14 ISE Profiling Probes Configuration
17:42 ISE Profiling Design Guide | https://cs.co/ise-profiling
18:40 Profiling Probe Selection Best Practice
20:30 Profiler Global Settings: RADIUS Change of Authorization (CoA)
24:12 Network Device Capabilities for Profiling: https://cs.co/nad-capabilities
25:48 Demo: Profiling Policies
27:12 Demo: Profiling Feed Service Online & Offline Updates
29:30 Demo: Review Updated Profiling Policies
31:08 Re-Profiling After Feed Updates
31:51 Customizing Profiling Policies : Global CoA vs Per-Profile CoA
35:15 Creating Profiling Policies
36:38 WiFi Edge Analytics for Catalyst Wireless Controllers (WLCs) with Apple, Intel, Samsung
39:52 AI-Proposed Profiling Policies
42:27 Demo: ISE AI Analytics for Profiling Proposals
46:12 AI Analytics - Advantage License Required (No Evaluation Support!)
47:48 ISE Profiling Integrations with Cisco Endpoint Analytics, Cisco CyberVision, Armis, Medigate, Ordr using pxGrid
50:00 Which Profiling Method is Best
52:55 ISE Endpoint Analysis Tool (EAT) | https://iseeat.cisco.com | End of Support
54:39 Profiling APIs and Automation | https://cs.co/ise-api | profilerprofile, endpoint, endpoints, customattributes
56:35 ISE Community & Resources
- ISE Profiling Design Guide : https://cs.co/ise-profiling
- TECSEC-3416 Walking on Solid ISE : https://cs.co/ise-training#CiscoLive
- ISE Security Ecosystem Integrations : https://cs.co/ise-guides
- WiFi Edge Analytics (IOS-XE)