INSIGHTS

Posts by Uzi Ahmed

Deep technical guidance on Cisco Security, zero trust, and the MoCy Platform — from the engineers who build and run it.

Custom MFC Profiling Policies in ISE 3.5: From Attributes to Enforcement

Authentication tells ISE who or what is connecting. For a lot of devices, that isn't much. IP phones, printers, cameras, and badge readers ...

What's New in ISE 3.5 Profiling

Profiling is how ISE works out what an endpoint is. It collects attributes from probes and network devices — DHCP options, RADIUS data, CDP ...

Not All Endpoint Attributes Are Equal

In a previous post we looked at where ISE keeps endpoint attributes — the configuration database, the per-PSN endpoint cache, and the ...

Where Do Endpoint Attributes Actually Live in ISE?

Most ISE profiling guides will walk you through enabling probes, building a profiling policy, and watching an endpoint get classified as a ...

Enrolling Users in Cisco Secure Access ZTA with Certificates

Cisco Secure Access gives users three paths to private resources:

Are Your LLMs Secure? Here's How Cisco is Thinking About It

As organizations increasingly integrate LLMs into their operations, a question that often gets deferred is: which model is actually the ...

Managing Cisco Secure Access with Terraform

Cisco Secure Access is Cisco's cloud-delivered Security Service Edge (SSE) solution. It provides secure access to private applications, ...

Why pxGrid Can No Longer Use Public CA Certificates

If you use Let's Encrypt or another public CA to sign certificates for Cisco pxGrid, you have a problem on the horizon. A change driven by ...

ISE Data Connect Made Simpler

Data Connect has been available since ISE 3.2, giving you direct SQL access to ISE's operational database. The problem? Getting it running ...