Cloud-delivered Cisco ISE. Without the overhead.
All the ISE goodness — none of the InfraOps. Hosted and fully managed network access control for wired, wireless, and VPN, powered by Cisco Identity Services Engine. You own policy; we run everything underneath it.
Lean IT teams shouldn't run ISE infrastructure.
We run the platform
Orchestrated deployment, secure dedicated enclave, upgrades, patches, certificates, backups, and continuous health assessments — handled.
You own policy
The familiar ISE admin experience with scoped RBAC: your team manages AAA, guest, posture, and use cases. Day-N NAC operations stay yours.
Cisco stays Cisco
Bring your own ISE licenses and active Cisco support contract. TAC, software development, and vulnerability patches remain with Cisco.
The outages you stop having.
Expired certificates
Automatic certificate creation, deployment, and renewal.
Missed patches
Automatic software and hardware upgrades — always on a current, supported release.
Backup roulette
Backup storage and management engineered in, never running during production hours.
Silent decay
Continuous health assessments — the year-three deployment stays as clean as day one.
Connect your network, your way.
Your enclave reaches your campuses and data centers over the interconnect that fits your environment — IPsec VPN, your SD-WAN fabric, or native cloud peering.
IPsec VPN
Fastest path to connected — standards-based tunnels from any edge device.
SD-WAN
Drop the enclave into your existing SD-WAN fabric as one more site.
Cloud peering
Already in the cloud? Peer VPCs/VNets directly — no tunnels required.
Pick your level of managed.
Essentials
- Orchestrated deployment & secure dedicated enclave
- Lifecycle: install, patches, upgrades, certificates
- Continuous ISE health assessments
- Backup storage & management
- Email & web support
Advantage
- Everything in Essentials
- Multi-region architecture
- Custom domains
- Phone, email & web support
Premier
- Everything in Advantage
- ISE design, deployment & configuration support
- Continuous ISE configuration assessment
- Co-managed ISE policies
1 or 3-year terms · BYOL: bring your own Cisco ISE licenses & active support contract · On the Cisco GPL: MINT-SECURITY-MCY
Common questions
Do I need to buy new ISE licenses?
No — ModernISE Platform is BYOL. Bring your existing Cisco ISE licenses and active Cisco support contract; deploy new or migrate an existing deployment.
Where does my data live?
In your own dedicated cloud account, pinned to your chosen geography (US, CA, UK, EU, AP, AU). The control plane has no data plane and no direct IP access to your network.
How do we connect our network?
Three interconnect patterns you can mix per region: site-to-site IPsec VPN, AWS VPC peering, or your SD-WAN routers deployed inside the enclave (Meraki vMX / Catalyst SD-WAN, BYOL).
How do we buy?
Worldwide through your Cisco account team or preferred partner on the Cisco Global Price List — SKU MINT-SECURITY-MCY.
From activation to ISE UI in 60–90 minutes.
Take ModernISE Platform for a test drive, or schedule a scoping session with our experts.