Cisco ISE Health Check

What is a Cisco ISE Health Check?

There is much to gain from Cisco Identity Services Engine (ISE), the next-generation identity and access control policy platform. Though after purchasing ISE, you may find yourself frustrated or unsure if you’re fully implemented or optimized.

That’s because deployments of Cisco ISE are frequently challenged by technical and organizational alignment issues. As ISE touches nearly every technical and functional environment in an organization, careful planning and experience are required to properly adopt this advanced security. 

Enter Alagen’s ISE Health Check, a comprehensive verification of Cisco ISE configurations. Working together with your team, we analyze your operational capabilities and deployment effectiveness to provide tailored guidance and maximize the value of ISE in your environment.

Having integrated millions of ISE-enforced ports globally, our team is the ideal partner to assess your implementation and suggest optimization techniques. Our experts evaluate your business requirements and use cases. We also review your platforms, supplicants, versions, common configurations, operational procedures, and recurring TAC issues to assess your deployment against Alagen’s leading practices for ISE implementation and management. 

Benefits of a Cisco ISE Health Check

An optimized Cisco ISE platform is good for your business. Day-to-day operations often require authorized users to have access to the network. For security purposes, those not authorized need to be kept out. A Cisco ISE Health Check minimizes the risk of costly security incidents and business damage related to incorrect or incomplete ISE deployments.

Our approach is as effective as it is efficient:

  • Improved network security and access control
  • Comprehensive verification of ISE deployment and operational capability
  • Prescriptive guidance for Cisco ISE optimization in your environment
  • Performed together with your team

When is an ISE Health Check Most Valuable?

Organizations in the following situations find a lot of value in this offering.

  • Currently in the pilot stage of Cisco ISE
  • Have not fully deployed ISE due to complexity
  • Only partially deployed ISE to solve a niche need
  • Lack the resources or staff to manage and maintain Cisco ISE
  • Facing renewal and failing to see the value of Cisco ISE
  • Recently migrated from ACS (commonly requires assistance)

If you have not yet deployed Identity Services Engine, we can help there too. Cisco Secure Access Control Server (ACS) users will especially want to migrate, now that all patching and support is at an end. Contact us to help it go smoothly.

Scalable Solution

Small

Stand-alone Deployment
(up to 2 nodes)

Run all personas:
• Policy Administration
• Monitoring and Troubleshooting Node
• Policy Service Node
• pxGrid Node

2 Device Types

1 Supplicant Type

Up to 2 Use Cases

Medium

Distributed Deployment
(up to 4 nodes)

Run all personas (stand-alone) or run specific personas (distributed):
• Policy Administration
• Monitoring and Troubleshooting Node
• Policy Service Node
• pxGrid Node

4 Device Types

1 Supplicant Type

Up to 4 Use Cases

Large

Dedicated Distributed Persona Deployment

Run all personas on dedicated nodes:
• Policy Administration
• Monitoring and Troubleshooting Node
• Policy Service Node
• pxGrid Node

6 Device Types

1 Supplicant Type

Up to 8 Use Cases

Load Balancer Review

Get Prescriptive Guidance

Alagen’s experts apply their deep knowledge of ISE to craft guidance that is clear, granular and actionable. Detailed observations are paired with associated impacts. Prioritized recommendations, rated from critical to low priority, outline the steps needed to remediate and optimize your ISE deployment. Alagen’s tailored assessment will deliver the insights you need to make informed decisions and get the most from your ISE investment. Contact us for help.