Hello.

In this video, we will walk through the steps needed to configure the feed
service in Cisco ISE so that we can retrieve new and updated endpoint profiling
policies. These new and updated policies will be received from a designated Cisco
feed server via subscription from our ISE server. Once our feed service is
configured and enabled, we'll then force a manual update from the feed service.
We will start from the main ISE dashboard by navigating to Work Centers, then to
Feeds under Profiler. Another way of going to this page would be to navigate to
Administration and then to Feed Service under Profiler there. On this page, we'll
verify that the check box to Enable Online Subscription Update has been checked.
Note that the system will automatically check for updates on a daily basis. I can
set the time for when that check will occur. It is currently set to run at 1:06 AM
UTC time. We want the administrator to be notified when the feed downloads occur,
so we'll check this box to do so. And then we will type in an email address for the
notifications to be sent to.
In my example, I will use admin@demo.local as the email address. Note that for this
email notification or any ISE email notification to work, we needed to configure an
SMTP server on our ISE server. We already have an SMTP server configured on our
system. I could have tested the feed service connection without entering an email
address for notifications, but I will go back and test it now by clicking on the
Test button.
My test was successful. If for some reason, the feed service connection were to
fail, perhaps due to firewalls or some other issue, I can do a manual update, where
I would download an update file from Cisco and manually load it into the system. To
perform that action, I would click on the Offline Manual Update tab.
From this tab, I can use the link to log in and register with the Cisco feed
server. I'll then be able to download the update file from Cisco. Once it's
downloaded, I would then use the Browse button to select the downloaded file, and
then click the Apply Update button here to apply the changes in the download update
file to my ISE server database.
I'll return to the online Subscription Update tab and then scroll to the bottom of
the page to save my settings. To force an immediate update, I will scroll back up
and click on the Update Now button. I see another pop-up window telling me that all
endpoints will be reprofiled and that the process may increase the system load and
also change the authorization policy for some endpoints. I'll click on Yes to
confirm that I want to continue the process.
Finally, I'll see a server response message at the bottom right of the window
telling me that the feed service update was successfully started. We will not wait
for the process to finish, as it will take a significant amount of time to
complete. I can verify the successes or failures of the feed service by reviewing
received emails in the admin@demo.local email account or scroll to the bottom of
the page to the latest update section.