---
title: "Cisco ISE Configuration"
canonical: "https://docs.infoblox.com/space/DeploymentGuideTDIntegrationCiscoISE/1544716637/Cisco%20ISE%20Configuration"
format: markdown
---
**Note**:** **The configuration steps outlined in this section serve as a general guideline for setting up Cisco Identity Services Engine (ISE) to support this solution. Actual configuration may vary depending on specific user requirements and the client's network environment. It is recommended to tailor the configuration to align with organizational policies and infrastructure.

## Enable ERS API for Administration Node

1. Navigate to Administration > System > Settings > API Settings
2. Click on the API Service Settings tab
3. Click on the toggle button for ERS (Read/Write) if it is not enabled
4. Click on Save

## Create Adaptive Network Control Policy

1. Navigate to Operations > Adaptive Network Control
2. In the policy list tab click on Add
3. Provide a name to the policy and select the action as QUARANTINE
4. Click on Submit

![image-20250620-040923.png](media://1b867cbb-f209-48ba-a637-e70e1934ab8d)

## Create Policy Condition for Quarantined Endpoints

1. Navigate to Policy > Policy Elements > Conditions
2. In Library Conditions Editor, select attribute for condition as ‘Session.ANCPolicy’
3. Keep the Condition as Equals
4. From the drop-down select the ANC Policy created for quarantined endpoints
5. Click on Save

![image-20250620-041041.png](media://aacf65f8-f55b-4096-889f-40bc813c0e29)

## Create Authorization Profile for Quarantined Endpoints

1. Navigate to Policy > Policy Elements > Results
2. Click on Authorization Profiles and click on the Add icon
3. Provide a name for the profile
4. Under Common tasks, click on VLAN check box and enter the Quarantine VLAN
5. Click on Submit

![image-20250620-042432.png](media://07f2fa4c-4063-4138-87ba-f1f4e8aff316)

## Create Authorization Policy for Quarantined Endpoints

1. Navigate to Policy > Policy Sets and select the required Policy set
2. Expand Authorization Policy – Local Exceptions
3. Click on the add icon
4. Edit the name of the rule as per your requirement
5. Click on the ‘+’ icon under conditions, search for the Policy condition created above and drag it to the editor section
6. Click on Use
7. Under Results > Profiles, from the drop-down select the Authorization profile created above
8. Click on Save

![image-20250620-042542.png](media://73c322b9-8eea-4f41-a65c-cd559e3c43cc)