Cisco Identity Services Engine (ISE) is a network administration product that enables the creation and enforcement of security and access policies for endpoint devices connected to a company's…

ISE centralizes the creation and enforcement of security policies, enabling administrators to control network access for all users and devices from a single console.

Cisco ISE's primary functions are centralized access control, policy enforcement, network segmentation, and contextual visibility to stop and contain threats; it does not include features for direct malware destruction, which is typically handled by dedicated anti-malware or endpoint protection platforms.

ISE gathers rich contextual information about connected users, devices, and applications, enhancing network visibility and allowing this data to be shared with other security tools.

By enforcing granular access policies and segmenting compromised endpoints, ISE effectively stops and contains security threats by limiting their impact and lateral movement.