Integrating BlackBerry UEM with Cisco ISE

Cisco Identity Services Engine (ISE) is network administration software that gives an organization the ability to control whether devices can access the work network (for example, permitting or denying Wi-Fi or VPN connections). Cisco ISE administrators can create and enforce access policies to make sure that only permitted devices can access the work network.

You can create a connection between Cisco ISE and BlackBerry UEM on-premises so that Cisco ISE can retrieve data about the devices that are activated on UEM. Cisco ISE checks device data to determine whether devices comply with access policies. For example:
  • Cisco ISE checks whether a user’s device is activated on UEM. If the device is not activated, an access policy can prevent the device from connecting to work Wi-Fi or VPN access points.
  • Cisco ISE checks whether a user’s device is compliant with UEM. If the device is not compliant (for example, the device is rooted or jailbroken), an access policy can prevent the device from connecting to work Wi-Fi or VPN access points.

Cisco ISE administrators can view, sort, and filter data about devices in the Cisco ISE management console. Administrators can also lock a device, delete the work data from a device, or delete all data from a device. For more information about network access and device controls, see Managing network access and device controls using Cisco ISE.

To integrate UEM with Cisco ISE, perform the following actions:

Step

Action

Step 1

Verify that your organization’s environment meets the requirements to integrate UEM with Cisco ISE.

Step 2

Connect UEM to Cisco ISE and set up an authorization profile and access policies.