Cisco Identity Services Engine (ISE) Review

We have a Cisco Identity Services Engine (ISE) that provides Reporting on and Radius Authentication Connection between AD and Our Cisco AnyConnect VPN. This allows me to report and record our connections (who, where, IP address, username, connection time, etc.) and push logs out to our Alien-vault SEIM with greater detail than the ASA devices would provide otherwise. It also lets us filter by IP address or Physical Address for some of our other channels so that only specific users can use those specific channels as opposed to anyone who can connect to our VPN portal. In essence, the business case is that it allows you greater control over who you allow into your systems and who you allow connecting to other systems in your control lowering the risk that someone will just come across a password and try to log into your VPN or Cisco Systems, that lower chance of compromise at such a high and remotely accessible level leads to lower risk and better stability overall. As a bonus, logging and reporting also help with troubleshooting.