Endpoint Encryption Vendor integration with ISE

[#1]

Hi,

We have a customer that wants a managed encryption solution, so disk encryption such as bitlocker for both laptop/desktop disks and connected USB's, however we would want a vendor that integrates into ISE so we can use the network access control through the encryption option policy, does anyone know a vendor on the list that does this? We're UK based.

Any help would be gratefully received.

Regards,

Mark

[paul · Accepted solution]

Check this out for the 4.x compliance module:

https://www.cisco.com/c/dam/en/us/td/docs/security/ise/ac_compliance_module/win_am_pm_de_fw_4_2_520_0.pdf

And the 3.x compliance module:

https://www.cisco.com/c/dam/en/us/td/docs/security/ise/ac_compliance_module/win_av_as_pm_de_3_6_11098_2.pdf

I haven't played around with disk encryption checking much, but don't think you can check for USB encryption but could be totally wrong on that. 

[thomas]

Please see the Cisco Security Technical Alliance Partners (CSTA) page for all official Cisco Security partners.

[#4]

Thanks for all the answers, I've already looked at the alliance partners and not all of them do encryption, so it was just guidance on who the top vendors are in this area, that will integrate into ISE via PXGRID etc. so I can investigate and make a recommendation.

[Jason Kunst]

Encryption checks are integrated with the system scan compliance module. They don’t have anything to do with pxgrid. What Paul said is correct please look at the compliance module listing.

See the example below. WE don’t recommend any specific vendor or have guidance. Perhaps someone like Gartner http://www.aurorait.com/2016/02/09/symantec-is-the-leader-for-endpoint-encryption-in-gartners-2016-magic-quadrant-report/