Cisco Cisco Identity Services Engine 1.3 릴리즈 노트
17
Release Notes for Cisco Identity Services Engine, Release 1.3
New Features in Cisco ISE, Release 1.3
Authorization Enhancements
In Cisco ISE 1.3, you can chain 802.1x with Centralized Web Authentication (CWA) and validate the
device using standard 802.1x. After the device is authenticated, the user is prompted to authenticate
using the captive portal. You can authorize based on both attributes from 802.1x session and Windows
AD/LDAP groups from the CWA session.
device using standard 802.1x. After the device is authenticated, the user is prompted to authenticate
using the captive portal. You can authorize based on both attributes from 802.1x session and Windows
AD/LDAP groups from the CWA session.
The certificate matching has been enhanced by the following additional attributes: Key Usage (KU),
Extended Key Usage (EKU), and Microsoft-CA “Certificate Template”.
Extended Key Usage (EKU), and Microsoft-CA “Certificate Template”.
Serviceability Enhancements
Cisco ISE 1.3 has been improved for easy deployment and easy troubleshooting. Additional
enhancements include tree view, Live Log / Live Session Filters, Endpoint Debugs, Export Policy in
XML, Bypass Suppression for each Endpoint, Right-Click option to copy the bypass details, Filtered
Support Bundle, and Centralized Certificate Management. See Also
enhancements include tree view, Live Log / Live Session Filters, Endpoint Debugs, Export Policy in
XML, Bypass Suppression for each Endpoint, Right-Click option to copy the bypass details, Filtered
Support Bundle, and Centralized Certificate Management. See Also
Licensing Enhancements
Licenses apply to wireless and VPN only, or Wired only for LAN deployments. All Cisco ISE appliances
are supplied with a 90-day Evaluation license. To continue to use Cisco ISE services after the 90-day
Evaluation license expires, and to support more than 100 concurrent endpoints on the network, you must
obtain and register Base licenses for the number of concurrent users on your system. If you require
additional functionality, you will need Plus and/or Apex licenses to enable that functionality.
are supplied with a 90-day Evaluation license. To continue to use Cisco ISE services after the 90-day
Evaluation license expires, and to support more than 100 concurrent endpoints on the network, you must
obtain and register Base licenses for the number of concurrent users on your system. If you require
additional functionality, you will need Plus and/or Apex licenses to enable that functionality.
In Cisco ISE 1.3, licenses are supplied in different packages as described in the following table:
Table 7
Cisco ISE License Packages
License Package
Cisco ISE Functionality included
Base
•
AAA, IEEE-802.1X
•
Guest management
•
Link encryption (MACSec)
•
TrustSec
•
ISE Application Programming Interfaces
Plus
•
Bring Your Own Device (BYOD) with
built-in Certificate Authority Services
built-in Certificate Authority Services
•
Profiling and Feed Services
•
Endpoint Protection Service (EPS)
•
Cisco pxGrid
Apex
•
Third Party Mobile Device Management
(MDM)
(MDM)
•
Posture Compliance