Applies To: Cisco Identity Services Engine (ISE)
Cisco Identity Services Engine (ISE) is a network administration product (which is either a Cisco ISE appliance or Virtual Machine) that helps in creating and enforcing security and access policies for endpoint devices of the company's routers and switches.
EventTracker helps to monitor events from Cisco ISE. Its dashboard, alerts and reports will help you to track authentication activities, endpoint compliance status, admin, and operations activity, to keep you informed about its activities. It will trigger alert whenever user authenticate fails, receive invalid or bad HTTP request or External RESTful Services (ERS) xml input suspect for Cross-Site Scripting (XSS) or injection attack.
Once Cisco ISE is configured to deliver events to EventTracker Manager, alerts, dashboards, and reports can be configured into EventTracker.
Alerts
Reports
The configuration details are consistent with EventTracker version 9.3x and later and Cisco ISE version 2.x.
To configure Cisco ISE to send logs to EventTracker, refer to the How-to Guide.
For more information please refer to the Integration guide.