Cisco CCNP Security Core (SCOR) 350-701Endpoint Security and Secure Network AccessEasy
A global company is expanding its operations and requires a secure and scalable solution for managing network access policies across multiple geographically dispersed sites. The solution must provide centralized authentication, authorization, and accounting (AAA) services, integrate with various network devices (switches, WAPs, VPN gateways), and support advanced posture assessment for endpoints. Which Cisco product is best suited to meet these requirements?
- ACisco Identity Services Engine (ISE)
- BCisco Firepower Threat Defense (FTD)
- CCisco Adaptive Security Appliance (ASA)
- DCisco Stealthwatch
Show answer & explanationAnswer & explanation
Correct answer: A. Cisco Identity Services Engine (ISE)
Cisco Identity Services Engine (ISE) is Cisco's leading network access control (NAC) solution that provides centralized AAA services, integrates with a wide range of network devices, and offers extensive capabilities for posture assessment and policy enforcement, making it ideal for large, distributed environments.
Why the other options are wrong
- B. FTD is Cisco's next-generation firewall, primarily focused on threat prevention, not centralized AAA or NAC.
- C. ASA is primarily a firewall and VPN concentrator, not a centralized NAC/AAA solution.
- D. Stealthwatch (now Cisco Secure Network Analytics) focuses on network visibility and threat detection, not access control.
Cisco Identity Services Engine (ISE)
A comprehensive network access control (NAC) solution that provides centralized AAA services, guest access, posture assessment, and device profiling.
- Centralized policy enforcement.
- Supports wired, wireless, and VPN access.
- Integrates with various Cisco security products.
Memory trick: ISE is the 'Identity' gatekeeper for all 'Services' on the 'Engine' of your network.