Cisco Cyber Vision and Cisco ISE Integrations

A Cisco Cyber Vision and Cisco ISE integration is a network security solution that

  • combines full operational technology (OT) visibility with device identity management,

  • enables implementation of software-defined segmentation strategies for industrial networks, and

  • enables you to automatically synchronize asset and endpoint data between Cisco Cyber Vision and Cisco ISE.

  • enables automatic synchronization of subnet-based groups and user-defined groups with Security Group Tags (SGTs) from Cisco Cyber Vision to Cisco Identity Services Engine (ISE). Using the Cisco ISE API, Cisco Cyber Vision can securely communicate and synchronize IP-to-SGT mappings, ensuring that security policies remain accurate and up-to-date across the network.

Integration details and workflow

Integrating Cisco Cyber Vision with Cisco ISE allows you to define network segments using industrial asset data collected by Cisco Cyber Vision. It also enables you to create dynamic security groups in Cisco ISE. These groups can be enforced across the network using Cisco TrustSec, increasing operational efficiency and security.

Component data from Cisco Cyber Vision is mapped to endpoint data in Cisco ISE. While many attributes have equivalents, you may need custom endpoint attributes to record all asset details. If there are changes to asset data in Cisco Cyber Vision, the updates are automatically synchronized with Cisco ISE, ensuring information consistency.

Example

If you add or modify component properties in Cisco Cyber Vision, the associated endpoint attributes in Cisco ISE update automatically, supporting real-time security enforcement and network segmentation.