The structure of a
Context Visibility page is similar to the Home page, except that Context
You can view the
context visibility data only from the Primary Administration Node (PAN).
Dashlets on Context pages show information about endpoints, and endpoint connections to NADs. The information currently displayed is based on the content in the list of data below the dashlets on each page. Each page shows a view of endpoint data, based on the name of the tab. As you filter the data, both the list and dashlets update. You can filter the data by clicking on parts of one or more of the circular graphs, by filtering rows on the table, or any combination those actions. As you select filters, the effects are additive, also referred to as cascading filter, which allows you to drill down to find the particular data you are looking for. You can also click an endpoint in the list, and get a detailed view of that endpoint.
four main views under Context Visibility:
Endpoints—You can select which endpoints to display based on types of devices, compliance status, authentication type, hardware inventory, and more. Refer to the The Hardware Dashboard section for additional information.
We recommend that you enable the accounting settings on the NADs to ensure that the accounting start and update information is sent to Cisco ISE.
Cisco ISE can collect accounting information, such as the latest IP address, status of the session (Connected, Disconnected, or Rejected), inactivity days of an endpoint, only if accounting is enabled. This information is displayed in the Live Logs/Live Sessions and the Context Visibility pages. When accounting is disabled on a NAD, there might be a missing, incorrect, or mismatch in the accounting information between the Live Sessions/ Live Logs and Context Visibility pages.
Setup wizard allows you to add a list of IP address range for endpoints
discovery. After this wizard is configured, Cisco ISE authenticates the
endpoints, but the endpoints that are not included in the configured IP address
range are not displayed in the Context Visibility > Endpoints tab and the
Endpoints listing page (under Work Centers > Network Access > Identities
User-Based—Displays user information from user identity sources.
Note the following points while using this view:
If there is any change in the username or password attribute, it will be reflected immediately on this page when there is a change in the authentication status.
If any other attribute other than the username is changed in the Active Directory, the updated attributes are displayed only after 24 hours upon re-authentication.
If the username and other attributes are changed in the Active Directory, the updated changes will be displayed immediately after re-authentication.
Network Devices—List of NADs that have endpoints connected to them. You can click the Number of Endpoints on a NAD (right-most column) to get a Context Visibility screen listing all those devices filtered by that NAD.
Application—The Application view is used to identify the number of endpoints that have a specified application installed. The results are displayed in graphical and table formats. The graphical representation helps you make a comparative analysis. For example, you can find out the number of endpoints with the Google Chrome software along with their Version, Vendor, and Category (Anti-phishing, Browser, and so on) in a table as well as a bar chart. For more information, see The Application Tab section.
You can create a new
view under Context Visibility to create a custom list, for additional
filtering. Dashlets are not supported in custom views for this release.
Clicking a section of a circular graph in a dashlet opens a new page with filtered data from that dashlet in Context Visibility mode. From that new page, you can continue to filter the displayed data, as described in Filtering Displayed Data in a View.
For more information about using Context Visibility to find endpoint data, see the following Cisco YouTube video, which uses ISE 2.1 https://www.youtube.com/watch?v=HvonGhrydfg.