Cisco Identity Services Engine (ISE) 3.5 | 3.4 P4 | 3.3 P8 - 基于身份的网络访问控制和策略实施系统

简介: Cisco Identity Services Engine (ISE) 3.5 | 3.4 P4 | 3.3 P8 - 基于身份的网络访问控制和策略实施系统

Cisco Identity Services Engine (ISE) 3.5 | 3.4 P4 | 3.3 P8 - 基于身份的网络访问控制和策略实施系统

思科身份服务引擎 (ISE) - 下一代 NAC 解决方案 (September 2025 New Release)

请访问原文链接:https://sysin.org/blog/cisco-ise-3/ 查看最新版。原创作品,转载请保留出处。

作者主页:sysin.org


思科身份服务引擎 (ISE)

sysin

了解和控制网络上的设备和用户

利用整个堆栈中的情报来执行策略、管理终端并提供可靠访问。零信任的多云 NAC 使之成为可能。

产品概述

占据有利地势

在零信任架构中,ISE 是策略决策点 (sysin)。它从堆栈中收集情报以验证用户和终端,自动包含威胁。

  • 利用弹性优势

    弹性始于安全连接。ISE 有助于确保只有受信任的用户及其设备才能访问您的自我管理网络中的资源。

  • 可视性优于 20/20

    了解谁在连接到您的网络、他们在使用什么设备以及他们正在使用什么连接是关键。ISE 使用关键情报自动识别、分类和分析设备。

  • 摆脱束缚

    从受束缚的基础设施切换到基础设施即代码 (IaC) 有助于保持业务完整性,同时使访问和策略与您的战略和目标保持一致。

  • 选定立场

    使用 ISE 3.x 验证您的设备状态,看看它与您的安全策略的符合程度。ISE 致力于保护您的网络、数据和资源免受恶意攻击。

系统要求

支持的硬件

支持 Cisco Secure Network Server 3700 系列设备。

思科安全网络服务器 (SNS) 3700 系列设备基于思科统一计算系统 (Cisco UCS) C220 机架式服务器,并专门配置为支持思科 ISE。思科 SNS 3700 系列设备旨在为各种工作负载提供高性能和高效率。

Cisco SNS 3700 系列设备提供以下型号:

  • Cisco SNS 3715 (SNS-3715-K9)
  • Cisco SNS 3755 (SNS-3755-K9)
  • Cisco SNS 3795 (SNS-3795-K9)

Cisco SNS 3715 设备专为小型部署而设计。Cisco SNS 3755 和 Cisco SNS 3795 设备具有多个冗余组件,例如硬盘和电源,适用于需要高度可靠系统配置的大型部署。建议将 Cisco SNS 3795 用于 PAN 和 MnT 角色

支持的虚拟化环境

Cisco ISE 支持以下虚拟化环境:

  • VMware

    • OVA templates: VMware version 14 or higher on ESXi 6.7 and later.
    • ISO file supports ESXi 6.5 or later.

    You can deploy Cisco ISE on VMware cloud solutions on the following public cloud platforms:

    • VMware cloud in Amazon Web Services (AWS): Host Cisco ISE on a software-defined data centre provided by VMware Cloud on AWS.
    • Azure VMware Solution: Azure VMware Solution runs VMware workloads natively on Microsoft Azure. You can host Cisco ISE as a VMware virtual machine.
    • Google Cloud VMware Engine: Google Cloud VMware Engine runs software defined data centre by VMware on the Google Cloud. You can host Cisco ISE as a VMware virtual machine on the software defined data centre provided by the VMware Engine.
  • Microsoft Hyper-V on Microsoft Windows Server 2012 R2 and later

  • KVM on QEMU 2.12.0-99 or above

  • AOS - 6.8 and 7.0, Nutanix AHV - 10.0

Cisco ISE 也可以部署在公有云平台上:

  • Amazon Web Services (AWS)
  • Microsoft Azure
  • Oracle Cloud Infrastructure (OCI)

下载地址

ISE 3.3

Cisco Identity Services Engine 3.3.0

File Name File Information Release Date Size
ise-patchbundle-3.3.0.430-Patch8-25111416.SPA.x86_64.tar.gz Cisco Identity Services Engine Software Patch Version 3.3.0.430-Patch8-25111416 Apply this patch to an existing ISE 3.3.0 installation. 17-Nov-2025 2683.27 MB
Cisco-ISE-3.3.0.430.SPA.x86_64.iso Cisco ISE Software Version 3.3 full installation. This ISO file can be used for installing ISE on SNS-36x5, SNS-37x5 Appliances, SNS-36x5 Servers as well as a VM installation on VMWare. 11-Jul-2023 12871.75 MB
ise-upgradebundle-3.0.x-3.2.x-to-3.3.0.430.SPA.x86_64.tar.gz Upgrade bundle for upgrading ISE version 3.0, 3.1, 3.2 to 3.3. This is a signed bundle for image integrity. 06-Jul-2023 14380.72 MB
ise-urtbundle-3.3.0.430-1.0.0.SPA.x86_64.tar.gz Upgrade Readiness Tool (URT) to validate config DB upgrade from 3.0, 3.1, 3.2 to 3.3. This is a signed bundle for image integrity. 06-Jul-2023 938.13 MB
Cisco-vISE-300-3.3.0.430.ova ISE 3.3 OVA file - 300GB disk for Eval, Small, Medium (Recommend for Evaluation, PSN or PxGrid). 11-Jul-2023 13881.12 MB

ISE 3.4

Cisco Identity Services Engine 3.4.0

File Name File Information Release Date Size
ise-patchbundle-3.4.0.608-Patch4-25103101.SPA.x86_64.tar.gz Cisco Identity Services Engine Software Patch Version 3.4.0.608-Patch4-25103101 Apply this patch to an existing ISE 3.4.0 installation. 04-Nov-2025 2004.01 MB
ise-3.4.0.608a.SPA.x86_64.iso Cisco ISE Software Version 3.4 full installation. This ISO file can be used for installing ISE on SNS-36x5, SNS-37x5 Appliances, as well as for VM installation on VMWare/KVM/Hyper-V Virtualization platforms. 18-Dec-2024 13859.46 MB
ise-upgradebundle-3.1.x-3.3.x-to-3.4.0.608a.SPA.x86_64.tar.gz Upgrade bundle for upgrading ISE version 3.1, 3.2, 3.3 to 3.4. This is a signed bundle for image integrity. 18-Dec-2024 14862.97 MB
Cisco-vISE-300-3.4.0.608.ova ISE 3.4 OVA file - 300GB disk for Eval, Small, Medium (Recommend for Evaluation, PSN or PxGrid). 01-Aug-2024 14595.70 MB
Cisco-vISE-600-3.4.0.608.ova ISE 3.4 OVA file - 600GB disk for Small or Medium (Recommend for PAN or MnT). 01-Aug-2024 14606.03 MB
Cisco-vISE-1200-3.4.0.608.ova ISE 3.4 OVA file - 1200GB disk for Medium or Large (Recommend for PAN or MnT). 01-Aug-2024 14582.39 MB
Cisco-vISE-2400-3.4.0.608.ova ISE 3.4 OVA file - 2400GB disk for Extra Large with 37xx support (Recommend for PAN or MnT). 01-Aug-2024 14604.64 MB
ise-urtbundle-3.4.0.608-1.0.0.SPA.x86_64.tar.gz Upgrade Readiness Tool (URT) to validate config DB upgrade from 3.1, 3.2, 3.3 to 3.4. This is a signed bundle for image integrity. 01-Aug-2024 575.00 MB

ISE 3.5

Cisco Identity Services Engine 3.5.0

File Information File Name Release Date Size
Cisco ISE Software Version 3.5 full installation. This ISO file can be used for installing ISE on SNS-36x5, SNS-37x5, SNS-38x5 Appliances, as well as for VM installation on VMWare/KVM/Hyper-V Virtualization platforms. Cisco-ISE-3.5.0.527.SPA.x86_64.iso 20-Sep-2025 14150.90 MB
ISE 3.5 OVA file - 2400GB disk for Extra Large with 38xx support (Recommend for PAN or MnT). Cisco-vISE-2400-3.5.0.527.ova 22-Sep-2025 14850.96 MB
ISE 3.5 OVA file - 1200GB disk for Medium or Large (Recommend for PAN or MnT). Cisco-vISE-1200-3.5.0.527.ova 20-Sep-2025 14844.90 MB
ISE 3.5 OVA file - 300GB disk for Eval, Small, Medium (Recommend for Evaluation, PSN or PxGrid). Cisco-vISE-300-3.5.0.527.ova 20-Sep-2025 14839.58 MB
ISE 3.5 OVA file - 600GB disk for Small or Medium (Recommend for PAN or MnT). Cisco-vISE-600-3.5.0.527.ova 20-Sep-2025 14842.23 MB
Upgrade bundle for upgrading ISE version 3.2, 3.3, 3.4 to 3.5. This is a signed bundle for image integrity. ise-upgradebundle-3.2.x-3.4.x-to-3.5.0.527.SPA.x86_64.tar.gz 20-Sep-2025 13715.23 MB
Upgrade Readiness Tool (URT) to validate config DB upgrade from 3.2, 3.3, 3.4 to 3.5. This is a signed bundle for image integrity. ise-urtbundle-3.5.0.527-1.0.0.SPA.x86_64.tar.gz 20-Sep-2025 867.08 MB

更多:Cisco 产品下载链接汇总
Cisco Identity Services Engine (ISE) 3.5 | 3.4 P4 | 3.3 P8 - 基于身份的网络访问控制和策略实施系统

思科身份服务引擎 (ISE) - 下一代 NAC 解决方案 (September 2025 New Release)

请访问原文链接:https://sysin.org/blog/cisco-ise-3/ 查看最新版。原创作品,转载请保留出处。

作者主页:sysin.org


思科身份服务引擎 (ISE)

sysin

了解和控制网络上的设备和用户

利用整个堆栈中的情报来执行策略、管理终端并提供可靠访问。零信任的多云 NAC 使之成为可能。

产品概述

占据有利地势

在零信任架构中,ISE 是策略决策点 (sysin)。它从堆栈中收集情报以验证用户和终端,自动包含威胁。

  • 利用弹性优势

    弹性始于安全连接。ISE 有助于确保只有受信任的用户及其设备才能访问您的自我管理网络中的资源。

  • 可视性优于 20/20

    了解谁在连接到您的网络、他们在使用什么设备以及他们正在使用什么连接是关键。ISE 使用关键情报自动识别、分类和分析设备。

  • 摆脱束缚

    从受束缚的基础设施切换到基础设施即代码 (IaC) 有助于保持业务完整性,同时使访问和策略与您的战略和目标保持一致。

  • 选定立场

    使用 ISE 3.x 验证您的设备状态,看看它与您的安全策略的符合程度。ISE 致力于保护您的网络、数据和资源免受恶意攻击。

系统要求

支持的硬件

支持 Cisco Secure Network Server 3700 系列设备。

思科安全网络服务器 (SNS) 3700 系列设备基于思科统一计算系统 (Cisco UCS) C220 机架式服务器,并专门配置为支持思科 ISE。思科 SNS 3700 系列设备旨在为各种工作负载提供高性能和高效率。

Cisco SNS 3700 系列设备提供以下型号:

  • Cisco SNS 3715 (SNS-3715-K9)
  • Cisco SNS 3755 (SNS-3755-K9)
  • Cisco SNS 3795 (SNS-3795-K9)

Cisco SNS 3715 设备专为小型部署而设计。Cisco SNS 3755 和 Cisco SNS 3795 设备具有多个冗余组件,例如硬盘和电源,适用于需要高度可靠系统配置的大型部署。建议将 Cisco SNS 3795 用于 PAN 和 MnT 角色

支持的虚拟化环境

Cisco ISE 支持以下虚拟化环境:

  • VMware

    • OVA templates: VMware version 14 or higher on ESXi 6.7 and later.
    • ISO file supports ESXi 6.5 or later.

    You can deploy Cisco ISE on VMware cloud solutions on the following public cloud platforms:

    • VMware cloud in Amazon Web Services (AWS): Host Cisco ISE on a software-defined data centre provided by VMware Cloud on AWS.
    • Azure VMware Solution: Azure VMware Solution runs VMware workloads natively on Microsoft Azure. You can host Cisco ISE as a VMware virtual machine.
    • Google Cloud VMware Engine: Google Cloud VMware Engine runs software defined data centre by VMware on the Google Cloud. You can host Cisco ISE as a VMware virtual machine on the software defined data centre provided by the VMware Engine.
  • Microsoft Hyper-V on Microsoft Windows Server 2012 R2 and later

  • KVM on QEMU 2.12.0-99 or above

  • AOS - 6.8 and 7.0, Nutanix AHV - 10.0

Cisco ISE 也可以部署在公有云平台上:

  • Amazon Web Services (AWS)
  • Microsoft Azure
  • Oracle Cloud Infrastructure (OCI)

下载地址

ISE 3.3

Cisco Identity Services Engine 3.3.0

File Name File Information Release Date Size
ise-patchbundle-3.3.0.430-Patch8-25111416.SPA.x86_64.tar.gz Cisco Identity Services Engine Software Patch Version 3.3.0.430-Patch8-25111416 Apply this patch to an existing ISE 3.3.0 installation. 17-Nov-2025 2683.27 MB
Cisco-ISE-3.3.0.430.SPA.x86_64.iso Cisco ISE Software Version 3.3 full installation. This ISO file can be used for installing ISE on SNS-36x5, SNS-37x5 Appliances, SNS-36x5 Servers as well as a VM installation on VMWare. 11-Jul-2023 12871.75 MB
ise-upgradebundle-3.0.x-3.2.x-to-3.3.0.430.SPA.x86_64.tar.gz Upgrade bundle for upgrading ISE version 3.0, 3.1, 3.2 to 3.3. This is a signed bundle for image integrity. 06-Jul-2023 14380.72 MB
ise-urtbundle-3.3.0.430-1.0.0.SPA.x86_64.tar.gz Upgrade Readiness Tool (URT) to validate config DB upgrade from 3.0, 3.1, 3.2 to 3.3. This is a signed bundle for image integrity. 06-Jul-2023 938.13 MB
Cisco-vISE-300-3.3.0.430.ova ISE 3.3 OVA file - 300GB disk for Eval, Small, Medium (Recommend for Evaluation, PSN or PxGrid). 11-Jul-2023 13881.12 MB

ISE 3.4

Cisco Identity Services Engine 3.4.0

File Name File Information Release Date Size
ise-patchbundle-3.4.0.608-Patch4-25103101.SPA.x86_64.tar.gz Cisco Identity Services Engine Software Patch Version 3.4.0.608-Patch4-25103101 Apply this patch to an existing ISE 3.4.0 installation. 04-Nov-2025 2004.01 MB
ise-3.4.0.608a.SPA.x86_64.iso Cisco ISE Software Version 3.4 full installation. This ISO file can be used for installing ISE on SNS-36x5, SNS-37x5 Appliances, as well as for VM installation on VMWare/KVM/Hyper-V Virtualization platforms. 18-Dec-2024 13859.46 MB
ise-upgradebundle-3.1.x-3.3.x-to-3.4.0.608a.SPA.x86_64.tar.gz Upgrade bundle for upgrading ISE version 3.1, 3.2, 3.3 to 3.4. This is a signed bundle for image integrity. 18-Dec-2024 14862.97 MB
Cisco-vISE-300-3.4.0.608.ova ISE 3.4 OVA file - 300GB disk for Eval, Small, Medium (Recommend for Evaluation, PSN or PxGrid). 01-Aug-2024 14595.70 MB
Cisco-vISE-600-3.4.0.608.ova ISE 3.4 OVA file - 600GB disk for Small or Medium (Recommend for PAN or MnT). 01-Aug-2024 14606.03 MB
Cisco-vISE-1200-3.4.0.608.ova ISE 3.4 OVA file - 1200GB disk for Medium or Large (Recommend for PAN or MnT). 01-Aug-2024 14582.39 MB
Cisco-vISE-2400-3.4.0.608.ova ISE 3.4 OVA file - 2400GB disk for Extra Large with 37xx support (Recommend for PAN or MnT). 01-Aug-2024 14604.64 MB
ise-urtbundle-3.4.0.608-1.0.0.SPA.x86_64.tar.gz Upgrade Readiness Tool (URT) to validate config DB upgrade from 3.1, 3.2, 3.3 to 3.4. This is a signed bundle for image integrity. 01-Aug-2024 575.00 MB

ISE 3.5

Cisco Identity Services Engine 3.5.0

File Information File Name Release Date Size
Cisco ISE Software Version 3.5 full installation. This ISO file can be used for installing ISE on SNS-36x5, SNS-37x5, SNS-38x5 Appliances, as well as for VM installation on VMWare/KVM/Hyper-V Virtualization platforms. Cisco-ISE-3.5.0.527.SPA.x86_64.iso 20-Sep-2025 14150.90 MB
ISE 3.5 OVA file - 2400GB disk for Extra Large with 38xx support (Recommend for PAN or MnT). Cisco-vISE-2400-3.5.0.527.ova 22-Sep-2025 14850.96 MB
ISE 3.5 OVA file - 1200GB disk for Medium or Large (Recommend for PAN or MnT). Cisco-vISE-1200-3.5.0.527.ova 20-Sep-2025 14844.90 MB
ISE 3.5 OVA file - 300GB disk for Eval, Small, Medium (Recommend for Evaluation, PSN or PxGrid). Cisco-vISE-300-3.5.0.527.ova 20-Sep-2025 14839.58 MB
ISE 3.5 OVA file - 600GB disk for Small or Medium (Recommend for PAN or MnT). Cisco-vISE-600-3.5.0.527.ova 20-Sep-2025 14842.23 MB
Upgrade bundle for upgrading ISE version 3.2, 3.3, 3.4 to 3.5. This is a signed bundle for image integrity. ise-upgradebundle-3.2.x-3.4.x-to-3.5.0.527.SPA.x86_64.tar.gz 20-Sep-2025 13715.23 MB
Upgrade Readiness Tool (URT) to validate config DB upgrade from 3.2, 3.3, 3.4 to 3.5. This is a signed bundle for image integrity. ise-urtbundle-3.5.0.527-1.0.0.SPA.x86_64.tar.gz 20-Sep-2025 867.08 MB

更多:Cisco 产品下载链接汇总

目录
相关文章
|
6月前
|
人工智能 算法 索引
构建AI智能体:三十六、决策树的核心机制(二):抽丝剥茧简化专业术语推理最佳分裂点
本文深入探讨了决策树的核心机制,重点分析了最佳分裂点的确定方法。通过鸢尾花分类案例,详细解析了基尼不纯度、加权平均基尼不纯度和信息增益等关键指标的计算过程。文章展示了决策树如何通过穷举搜索找到能最大程度降低不纯度的特征阈值(如花瓣宽度1.65cm),并解释了不同随机种子对分裂点选择的影响。决策树通过一系列if-else问题构建分类模型,其核心是追求节点纯度最大化,采用贪婪算法在每个节点选择信息增益最大的分裂方案。这种机制使决策树既直观又强大,但也需要注意过拟合问题。
312 5
|
6月前
|
XML JSON API
Rakuten 商品详情核心 API(Item Search API)参数体系解析与权限配置指南
Rakuten 商品搜索 API(如 IchibaItem/Search)的参数体系围绕商品检索需求设计,核心参数分为 必选参数、可选参数 和 控制参数 三类,具体如下
|
4月前
|
人工智能 监控 架构师
驾驭“数字员工”:AI Agent时代的组织变革与未来十年黄金职业路线
本文前瞻性解析AI Agent时代组织变革,提出“人机混合智能组织”三大新角色(智能体主管、协作架构师、AI伦理官),首创TECH领导力模型(技术素养、伦理框架、协调沟通、以人为本),并为技术、管理、运营从业者提供实操转型路径。(239字)
375 3
|
6月前
|
机器学习/深度学习 人工智能 安全
破解传统维护痛点:AR眼镜+AI在飞机接线检查中的创新应用|阿法龙XR云平台
本方案将AR眼镜与图像AI识别技术融合,应用于航空电气系统接线检查。通过AR终端实时采集图像,AI引擎智能比对标准数据,自动识别接线错误并可视化提示,实现高效、精准、低误判的智能维护。结合云端管理平台,提升检查效率5-8倍,准确率超99%,降低人为失误,缩短培训周期,推动航空维护智能化升级。(238字)
|
6月前
|
存储 SQL 缓存
Delta Join:为超大规模流处理实现计算与历史数据解耦
Delta Join(FLIP-486)是Flink流式Join的范式革新,通过将历史数据存储与计算解耦,实现按需查询外部存储(如Fluss、Paimon),避免状态无限增长。它解决了传统Join在高基数场景下的状态爆炸问题,显著降低资源消耗:状态减少50TB,成本降10倍,Checkpoint从小时级缩短至秒级,恢复速度提升87%。兼容标准SQL,自动优化转换,适用于海量数据实时关联场景,推动流处理迈向高效、稳定、可扩展的新阶段。
682 1
Delta Join:为超大规模流处理实现计算与历史数据解耦
|
7月前
|
监控 安全 网络协议
Cisco Identity Services Engine (ISE) 3.5 发布 - 基于身份的网络访问控制和策略实施系统
Cisco Identity Services Engine (ISE) 3.5 发布 - 基于身份的网络访问控制和策略实施系统
732 1
Cisco Identity Services Engine (ISE) 3.5 发布 - 基于身份的网络访问控制和策略实施系统
|
9月前
|
安全 KVM 虚拟化
Cisco Identity Services Engine (ISE) 3.4 - 基于身份的网络访问控制和策略实施系统
Cisco Identity Services Engine (ISE) 3.4 - 基于身份的网络访问控制和策略实施系统
515 2
Cisco Identity Services Engine (ISE) 3.4 - 基于身份的网络访问控制和策略实施系统
载波相移CPS-SPWM调制方法的simulink建模与仿真
本课题研究载波相移CPS-SPWM调制方法的Simulink建模与仿真。CPS-SPWM通过在多个功率单元中引入载波相移,使开关动作错开,输出多电平PWM波形,接近理想正弦波。系统采用单极倍频调制波反相法,生成互补脉冲序列控制开关管通断。双极性CPS-PWM的电压电平数为n+1,基波分量是单个双极性PWM的N倍。仿真结果验证了该方法的有效性,核心程序基于MATLAB2022a实现。
|
SQL 存储 安全
带你读《Apache Doris 案例集》——07查询平均提速700% ,奇安信基于 Apache Doris 升级日志安全分析系统(2)
带你读《Apache Doris 案例集》——07查询平均提速700% ,奇安信基于 Apache Doris 升级日志安全分析系统(2)
845 0
|
安全 网络安全 网络虚拟化
零信任SDP是什么,有什么作用
综上所述,零信任SDP通过其独特的安全架构为企业网络安全提供了强大的保护屏障。在网络威胁日益增多的当代,采用零信任SDP可以帮助企业防范安全风险,保护敏感数据,同时为用户提供高效便捷的访问体验。
845 4