Describes how Cisco Cloud Control provides a centralized view of Cisco ISE deployment health, authentication performance, node utilization, connectivity, user identities, and endpoints. It explains how administrators use these views to monitor deployments and investigate identity and device issues.
Cisco Cloud Control provides a centralized view of connected Cisco ISE deployments, including deployment health, authentication performance, node utilization and connectivity, and user and endpoint inventories. The Cisco ISE Cloud Central Agent is installed on the Cisco ISE Policy Administration Node (PAN) and connects the on-premises deployment to Cisco Cloud Control. Use the ISE Health Dashboard to monitor deployment health, and use the user and endpoint inventories to view identity and device details.
You can use the ISE Health Dashboard to monitor the connected deployment and overall health. Then use the user and endpoint inventories to investigate identity and device details.
Monitor Cisco ISE deployments
The ISE Health Dashboard in Cisco Cloud Control () brings together agent status, deployment details, authentication and session activity, node status, and performance metrics. Use it to monitor authentication availability, identify performance degradation or unusual latency, review node connectivity, investigate issues before they affect your network, and speed root-cause analysis.
The dashboard includes Cisco ISE Cloud Central Agent information such as heartbeat, reachability, uptime, agent version, host, last collection time, and traffic. Deployment information includes the Cisco ISE release and patch version, deployment admin IP address, total node count, active sessions, and average authentication latency. The charts show authentication latency, active sessions, CPU and memory, server load, disk usage, RADIUS request volume, RADIUS authentication latency, and RADIUS authentication failures.
Review users and endpoints
The Users page in Cisco Cloud Control () provides a centralized inventory of discovered identities that combines identity context, activity, posture, and TrustSec information. You can use it to monitor users, identify inactive or unprovisioned accounts, distinguish internal users, and find inconsistent identity data.
The Endpoints page in Cisco Cloud Control () provides a centralized inventory of discovered devices. You can search by serial number, hardware ID, or computer SID and use the inventory to identify unmanaged or unregistered devices, find endpoints with unknown operating systems, distinguish desktops, laptops, and mobile devices, and review manufacturing and hardware details.
You can also apply tags for ownership, encryption, or investigation status to identify newly discovered endpoints. This endpoint view brings together device identity, ownership posture, and authentication context to support device investigation and access policy decisions.