Table Of Contents
Revised: June 20, 2011, OL-22971-01
This preface provides the following information about the Cisco Identity Services Engine (ISE) 3300 Series appliance:
Overview of Cisco Identity Services Engine
Cisco Identity Services Engine (ISE), as a next-generation identity and access control policy platform enables enterprises to enforce compliance, enhance infrastructure security, and streamline their service operations. Cisco ISE's unique architecture allows enterprises to gather real-time contextual information from networks, users, and devices in order to make proactive governance decisions by tying identity to various network elements including access switches, wireless LAN controllers (WLCs), virtual private network (VPN) gateways, and data center switches.
Cisco ISE is a key component of the Cisco Security Group Access Solution. Cisco ISE is a consolidated policy-based access control solution that:
•Combines authentication, authorization, accounting (AAA), posture, profiler, and guest management services into one appliance
•Enforces endpoint compliance by checking the device posture of all endpoints accessing the network, including 802.1X environments
•Provides support for discovery, profiling, policy-based placement, and monitoring of endpoint devices on the network
•Enables consistent policy in centralized and distributed deployments allowing services to be delivered where they are needed
•Employs advanced enforcement capabilities including Security Group Access (SGA) through the use of Security Group Tags (SGTs) and Security Group (SG) Access Control Lists (ACLs)
•Supports scalability to support a number of deployment scenarios from small office to large enterprise environments
The Cisco ISE software comes preinstalled on a range of physical appliances with various performance characterizations. The inherent scalability of Cisco ISE allows you to add appliances to a deployment and increase performance and resiliency, as needed. The Cisco ISE architecture supports standalone and distributed deployments, along with high-availability options. Cisco ISE allows you to configure and manage your network from a centralized portal for efficiency and ease of use.
Cisco ISE also incorporates distinct configurable roles and services, so that you can create and apply Cisco ISE services where they are needed in the network. The result being a comprehensive Cisco ISE deployment that operates as an fully functional and integrated system.
This installation guide provides the following types of information about the Cisco ISE Release 1.0:
•Prerequisites for installation
•Procedures for installing the Cisco ISE software on a supported Cisco ISE appliance
•Procedures for installing the Cisco ISE software on a supported VMware virtual machine
•Procedures for installing the Cisco ISE software on a supported Cisco Network Admission Control (NAC) appliance or Cisco Secure Access Control System (ACS) appliance
Cisco ISE Release 1.0 offers a choice of three appliance platforms, depending upon the size of your deployment:
•Small network—Cisco ISE 3315
•Medium network—Cisco ISE 3355
•Large network—Cisco ISE 3395
The Cisco ISE software runs on the Cisco Application Deployment Engine (ADE) Release 2.0 operating system (ADE-OS). The Cisco ADE-OS and Cisco ISE software run on either a dedicated Cisco ISE 3300 Series appliance or on a VMware server (Cisco ISE VM).
For VMware-based installations, configure the VMware environment to meet a specific set of minimal system requirements and install the Cisco ISE Release 1.0 software. The supported VMware versions include:
•VMware Elastic Sky X (ESX), version 4.x
•VMware ESXi, version 4.x
Note For more information about VMware-based installations, see Chapter 4, "Installing Cisco ISE 3300 Series Software in a VMware Virtual Machine".
Note VMware server, version 2.0, is only supported for demonstrating the features of Cisco ISE Release 1.0, and is not supported for production environments.
This guide is designed for network administrators, system integrators, or network deployment personnel who install and configure the Cisco ISE software on Cisco ISE 3300 Series appliances or on VMware servers. As a prerequisite to using this hardware installation guide, you should be familiar with networking equipment and cabling and have a basic knowledge of electronic circuitry, wiring practices, and equipment rack installations.
Warning Only trained and qualified personnel should be allowed to install, replace, or service this equipment. Statement 1030
lists reference material that may be useful to review before attempting to install the Cisco ISE 3300 Series Release 1.0 software. For each of the installation processes, see the corresponding chapter, appendix, or guide.
This guide uses the following conventions to convey instructions and information.
Note Means reader take note. Notes contain helpful suggestions or references to material that is not covered in this guide
Caution Means reader be careful. In this situation, you might do something that could result in equipment damage or loss of data.
lists the product documentation available for the Cisco ISE Release. General product information for Cisco ISE is available at http://www.cisco.com/go/ise. End-user documentation is available on Cisco.com at http://www.cisco.com/en/US/products/ps11640/tsd_products_support_series_home.html.
Links to Policy Management Business Unit documentation are available on www.cisco.com at the following locations:
•Cisco NAC Appliance
•Cisco NAC Guest Server
Table 4 Updates for Cisco Identity Services Engine Hardware Installation Guide, Release 1.0
June 2, 2011
May 25, 2011
Added a security advisory regarding the serial console connection to Ethernet Connector and Console Port Guidelines, page 15 and Connecting the Console, page 11
June 20, 2011
Cisco Identity Services Engine (ISE) Release 1.0
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:
Subscribe to the What's New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop by using a reader application. The RSS feeds are a free service, and Cisco currently supports RSS Version 2.0.