Cisco Cisco Identity Services Engine 1.3 백서

Cisco

© 2016 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public.

Page 2 of 27

Table of Contents

Introduction .................................................................................................................................................................. 3

What Is the Cisco Medical NAC? ....................................................................................................................... 3
The Challenge of Securing Medical Devices ..................................................................................................... 4
Document Scope ............................................................................................................................................... 5

Secure Authentication for Medical Devices ................................................................................................................. 6

802.1X Authentication ........................................................................................................................................ 6
Web Portal Authentication ................................................................................................................................. 6
MAC Authentication ........................................................................................................................................... 7

Classification of Healthcare-Specific Devices ............................................................................................................. 7

What Is Profiling? ............................................................................................................................................... 8
ISE Probes to Classify Healthcare Devices ....................................................................................................... 8

RADIUS Probe ................................................................................................................................................... 8
SNMP Probe ...................................................................................................................................................... 9
SNMPTRAP ....................................................................................................................................................... 9
SNMPQUERY .................................................................................................................................................... 9
DHCP Probe .................................................................................................................................................... 11

HTTP Probe ..................................................................................................................................................... 12

DNS Probe ....................................................................................................................................................... 13
Nmap Probe ..................................................................................................................................................... 14
NetFlow Probe ................................................................................................................................................. 14
ACIDEX ............................................................................................................................................................ 15
Device Sensor ................................................................................................................................................. 16

Summary of Probes ................................................................................................................................................... 16
Cisco Medical NAC Profile Library ............................................................................................................................ 18

Overview .......................................................................................................................................................... 18
Installing the Library ......................................................................................................................................... 20

Downloading the Library .................................................................................................................................. 20
Importing the Library ........................................................................................................................................ 20

Establish Logical Groups ................................................................................................................................. 21

Segmentation ............................................................................................................................................................ 22

Overview .......................................................................................................................................................... 22
Segmentation Using Dedicated Networks ....................................................................................................... 22
Segmentation Using ACLs ............................................................................................................................... 23
Segmentation Using VLANs and WLANs ........................................................................................................ 23
Cisco TrustSec Technology and pxGrid .......................................................................................................... 24

SGT Authorization Policy Example .................................................................................................................. 24

APPENDIX A—Medical Device Custom Profile Checklist ......................................................................................... 25