Cisco ISE

SAMURAI Networks surfaces TrustSec from Cisco ISE: security groups (SGTs), SGACLs, the policy matrix, SXP mappings, endpoints and network access devices.

Open a device from the Devices page or the sidebar to reach these tabs.

Overview

A summary of TrustSec posture for this ISE deployment.

Security Groups

Security Group Tags (SGTs); orphaned SGTs not referenced by any policy are highlighted.

SGACLs

Security Group ACLs that enforce SGT-to-SGT policy.

Policy Matrix

The TrustSec policy matrix: source SGT by destination SGT, resolving to an SGACL.

SXP

SXP peer connections propagating IP-to-SGT bindings.

Endpoints

Hosts learned on this device (by MAC, ARP, DHCP snooping, CDP/LLDP and 802.1X) enriched with vendor (OUI) and identity.

NADs

Network Access Devices registered to ISE.

Changes

Configuration changes for this device, grouped by sync on a timeline. Added, removed and reordered rules render as structured cards (source and destination zones, addresses, applications and services laid out like the rule itself), each attributed to the responsible admin and access method where audit data is available. Compare diffs any two snapshots, and Analyze with AI explains a change in place when an AI provider is configured.