Cisco ISE for BYOD and Secure Unified Access

Chapter 13. Authentication and Authorization Policies

The previous chapter focused on the levels of authorization you should provide for users and devices based on your logical Security Policy. You will build policies in ISE that employ those authorization results, such as Downloadable Access Lists and Authorization Profiles to accommodate the enforcement of that “paper policy.”

These authorization results are the end result; the final decision of a login session or a particular stage of a login session.

This chapter examines how to build the Authentication and Authorization Policies that will eventually assign those results that were created in Chapter 12. These policies can be equated to the rules in a firewall and are constructed in a similar ...