Cisco Cisco Identity Services Engine 1.3 시작 가이드
At-A-Glance
Gain Insight to High-Risk User Behavior and
Remediate Threats
Cisco® Identity Services Engine gathers a wealth of contextual user
identity, endpoint, and network information that is useful for security
purposes. To give you greater insight into risky user activities, the
Cisco ISE shares this contextual data with FortScale, a partner in user-
behavior-based threat detection.
identity, endpoint, and network information that is useful for security
purposes. To give you greater insight into risky user activities, the
Cisco ISE shares this contextual data with FortScale, a partner in user-
behavior-based threat detection.
The result is that you can expedite security measures. You’ll gain the
ability to quickly and easily assess the significance of security events by
correlating expanded Identity Services Engine context with FortScale
user-behavior security alerts. The Cisco platform shares contextual
information about each security event with FortScale management
consoles using Cisco Platform Exchange Grid (pxGrid) technology.
ability to quickly and easily assess the significance of security events by
correlating expanded Identity Services Engine context with FortScale
user-behavior security alerts. The Cisco platform shares contextual
information about each security event with FortScale management
consoles using Cisco Platform Exchange Grid (pxGrid) technology.
Contextual data can include each user’s identity and level of access
and the type of device used. With this data, a security analyst can more
quickly determine who is involved in a security event, whether it needs
further investigation, and how urgent a threat is.
and the type of device used. With this data, a security analyst can more
quickly determine who is involved in a security event, whether it needs
further investigation, and how urgent a threat is.
These enhanced capabilities streamline the process of threat detection,
simplify IT response, and slash the time it takes to remediate network
security threats.
simplify IT response, and slash the time it takes to remediate network
security threats.
How Cisco Identity Services Engine and FortScale
Integration Works
Identity Services Engine integration with FortScale is accomplished in
the following way:
the following way:
• The Cisco Identity Services Engine provides its user identity and
device information to FortScale.
• Identity Services Engine contextual data is also appended to
associated events in FortScale to provide the additional context of the
user, device, and access level for better understanding of a security
event’s significance.
user, device, and access level for better understanding of a security
event’s significance.
• All these functions can be logged by the FortScale console for unified
user-behavior security-threat reporting.
Benefits
• Increase network defense
effectiveness by adding user-
behavior analysis to your threat
defense architecture.
• Decrease the time it takes to
classify and respond to events
with user, device type, and
access level information.
• Expedite security event
responses to high-severity
events by quarantining a user
or redirecting traffic for deeper
investigation.
© 2015 Cisco and/or its affiliates. All rights reserved.
Cisco Identity Services
Engine and FortScale
Integration