Specifications

2-29
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 2 Device Management: Adding Clean Access Servers, Adding Filters
Integrating Cisco ISE Profiler
The filter list can be sorted by column by clicking on the column heading label (Subnet, Clean Access
Server, Description, Access Type).
Integrating Cisco ISE Profiler
The Cisco Identity Services Engine (ISE) Profiler 1.0.4 can be integrated with Cisco NAC Appliance 4.9
and the ISE Profiler endpoints can be synchronized with the NAC Appliance.
For more details on Cisco ISE Profiler, refer to the following guides:
http://www.cisco.com/en/US/products/ps11640/products_user_guide_list.html
Note You can integrate only Cisco ISE Profiler, Release 1.0.4 and later with Cisco NAC Appliance, Release
4.9 and later. The earlier versions of ISE and NAC Appliance are not supported.
Limitations
• You can use either the NAC Profiler or the ISE Profiler at a time and you cannot use both the
Profilers simultaneously.
• When you are upgrading from a previous version of NAC Appliance using NAC Profiler to
release 4.9, all the endpoints along with Access Type policies added in the “Filters” are migrated to
release 4.9. When you replace Nac Profiler with ISE Profiler, you need to configure the rules in NAC
Manger for the Access Type policies in the endpoints.
Note The “NAC-Events” created in NAC Profiler are not available in ISE Profiler. They should be
configured as “Rules” in CAM.
This section describes the following:
• Add Cisco ISE Profiler Details, page 2-30
• Display/Edit/Delete Cisco ISE Profiler Details, page 2-31
• Synchronize Endpoints from Cisco ISE Profiler, page 2-32
• Map Endpoint Policies, page 2-33
• Troubleshooting when Synchronizing the Cisco ISE, page 2-38