Native ISE capabilities for health monitoring can be done via SNMP for underlying O/S related statistics. However, any of the ISE application can be monitored using alarms. Alarms can be configured to be sent as syslog or be configured to trigger an e-mail to an admin user. ISE can also be configured to send general health statistics every 5 minutes for CPU and load average via syslog as well. More information here:
Cisco Identity Services Engine Administrator Guide, Release 2.1 - Monitoring and Troubleshooting [Cisco Identity Servic…
In addition to the above, depending on the capabilities of the network monitoring tool, one can also send RADIUS test packets to ensure the authentication is being processed properly.
