Cisco ISE is a security policy management platform that provides secure access to network resources. Cisco ISE functions as a policy decision point and enables enterprises to ensure compliance, enhance infrastructure security, and streamline service operations.

As part of the Jump Start Services, Aqueduct will perform all the pre-deployment steps necessary to achieve a successful install:

License Inspection

1. Aqueduct Engineer will inspect all licenses for quantity and type and ensure licensure matches expected entitlement
2. Aqueduct Engineer will correct any licensing discrepancy including: License Application and Coordination with Cisco Licensing for any discrepancies until resolved

Environment Staging

1. Installation of Cisco ISE OVA on Amazon Machine Instance (AMI) or customer provided Virtual Machine (VM)
2. Installation of Cisco ISE OVA for HA on Amazon Machine Instance (AMI) or separate customer provided Virtual Machine (VM)
3. Initial configuration for IP addresses, DNS, time zone, NTP and SMTP (Validate installation and Install Cisco recommended patches)
4. Install and verify Cisco Smart Licensing
5. Configure environment for EasyConnect (Join ISE nodes to AD, Enable PassiveID WMI functionality, Import AD groups, Configure switches for basic ISE connectivity, Configure pre-logon policy and Configure post-logon policy)

Testing

1. Enable test switch port(s) for MAB (EasyConnect) authentication
2. Connect Windows test endpoint(s) to test switchports
3. Verify ISE LiveLogs and endpoint access
4. Configure remaining switchports for MAB (EasyConnect) authentication

At the end of the Aqueduct Jump Start customers will find a best-practice built pair of HA ISE nodes ready for final configuration and deployment.