Cisco Implementing and Configuring Cisco Identity Service Engine (SISE)

Change of Authorization is a fundamental component of Cisco TrustSec and Cisco ISE. ✘ Change of Authorization can be triggered dynamically based on a matched condition in a policy, and manually by being invoked by an administrator operation. ✘ It is possible to trigger Change of Authorization manually from the ISE interface. ✘ Authentication is the supported Change of Authorization action type. ✔

Administration only ✘ Inline Posture only ✘ Administration and Policy Service ✘ Policy Service, Monitoring, and Administration ✔

VLAN assignment ✘ downloadable ACLs ✘ security group access ✘ dynamic ACLs ✔

Request a certificate from the CA, and import the CA-signed certificate into ISE. ✘ Generate a CSR; download the certificate from the CA; bind the CA-signed certificate with its private key, and import the CA-signed certificate into ISE. ✘ Generate a CSR; export the CSR to the local file system and send to the CA; download the certificate from the CA, and bind the CA-signed certificate with itsprivate key. ✘ Submit a CSR to the CA; download the certificate from the CA; bind the CA-signed certificate with its private key, and import the CA-signed certificate into ISE. ✔

admin/admin ✘ admin/cisco ✘ ISEAdmin/admin ✘ admin/no default password--the admin password is configured at setup ✔

A license is installed on the Policy Service node within ISE deployment. ✘ A license is installed on the primary or secondary Administration node within ISE deployment. ✘ A license is installed only on the primary Administration node within ISE deployment. ✘ A license is preinstalled for ISE deployment. ✔

In the event of failure of the Primary Administration node, the standby instance automatically becomes active. ✘ In the event of failure of the Primary Monitoring node, the standby instance automatically becomes active. ✘ Clustering of Policy Service nodes to provide N+1 redundancy ✘ Stateless failover of Inline Posture nodes ✔

permit all access ✘ deny all access ✘ redirect users to CWA ✘ redirect users to LWA ✔

TCP 88 ✘ TCP 445 ✘ UDP 53 ✘ UDP 123 ✔ UDP/TCP 389 ✔

Accept ✘ Reject ✘ Continue ✘ Drop ✔