Cisco TrustSec handles the tagging of inbound traffic for a particular user or a device. The purpose of tagging the traffic is to enforce access policies. Classification and policy-enforcement features are embedded in Cisco routers, switches, wireless LAN, and firewall appliances. Cisco TrustSec can be used to improve the security posture of the network environment by sampling access-control policies to device types and users. The Cisco TrustSec is centrally managed using the Cisco Identity Services Engine (ISE).
The benefits of using Cisco TrustSec:
- Reduces operational expenses by automating firewall and access-control rules and administration
- Allows secure access to resources by controlling which user and device is allowed or denied access
- Adapts to changing workforces