Estudio de la tecnología Cisco Identity Services Engine (ISE) para mejorar la seguridad de los usuarios de la infraestructura WLAN de la ESPOCH.

Abstract

The present graduation research work was a study of the Cisco ISE (Identity Services Engine) technology apply to improve the users safety of the WLAN (Wireless Local Area Network) infrastructure of ESPOCH (Escuela Superior Politécnica de Chimborazo) to analyze a possible safety and control the access to the ESPOCH’s WLAN facility. The management of authentication and authorization policies was studied according to these profiles: device types, location, user groups, etc by using a WLC (Wireless LAN Contoller) that is responsible for automating the control of access point in a centralized way. It is integrated with an ISE, it acts as both authentication and authorization RADIUS server allowing the control of the SSID (Specifying Service Set Identifier), according to the proposed safety policies using the 802.1X protocol, an external active directory repository that was used as the evaluator of users and the certificates needed to access the wireless network. The policies proposed in the study analyzed the great capacity of this technology by providing different types of safety solutions to the network and users specifically. They were having an SSID, this technology through security standard is responsible for automatically segmenting the network by dynamically addressing corresponding VLAN for each user group. It was concluded that having a network infrastructure with Cisco equipment offers a number of advantages in terms of wireless safety, that the current growth of networks and the information that is used in them becomes more important to have well established policies. It is recommended to review the user manual for possible ISE installation problems.