Identity Services Engine (ISE) & InsightVM

Reach Complete Network Visibility

The expansion of the threat landscape combined with the increasingly dynamic nature of today’s business infrastructures has made it critical for security professionals to comprehensively view vulnerabilities and user behaviors across their entire network. The integration of Rapid7 InsightVM* with Cisco Identity Services Engine (ISE) gives organizations complete visibility into vulnerabilities across their networks, and allows ISE users to make more informed mitigation decisions and better enforced quarantine measures.

Bring Real-Time Vulnerability Assessment and Mitigation to ISE Environments

Using InsightVM’s powerful analytics, you can quickly identify the most impactful steps to take to address vulnerabilities and reduce security risks in your environment. Integrating InsightVM with Cisco ISE lets you can go a step further to block or quarantine assets if deemed too risky. You can then remediate vulnerabilities to lower your risk score, removing barriers to the network and continuously mitigating security exposures with a real-time understanding of your risk posture.

InsightVM will also work with ISE to enable quick assessment and policy-based mitigation of endpoint security risks. This includes the following functions:

• Real-time vulnerability assessment: This integrated solution will invoke real-time discovery and assessment of devices as they connect to the network, including transient ones. ISE can detect a device when it connects to the network, triggering InsightVM to scan the device. Ultimately, you get an accurate, real-time picture of the risks associated with the devices connected to your network.
• Shrink the gap between detection and mitigation: ISE can act on information received from InsightVM to improve compliance by protecting endpoints, initiating external remediation processes, and limiting network access of devices that present high security risks to the network.

Figure 1: Effective, policy-based decision making with ISE and InsightVM.

How It Works

Leverage InsightVM and ISE’s direct interoperability via Cisco’s pxGrid.

*All mentions of Rapid7 InsightVM associated with its integration with Cisco Identity Services Engine (ISE) also apply to Rapid7 Nexpose.