Cisco Identity Services Engine (ISE) is a Network Access Control (NAC) and policy decision/enforcement platform. It centralizes AAA (RADIUS/TACACS+), endpoint profiling, posture assessment, guest/BYOD onboarding, and policy-based access decisions across wired, wireless, and VPN connections.
In practical terms, ISE is most often deployed to control who or what can connect, to enforce segmentation and least-privilege access, and to provide auditability and troubleshooting for identity-based access.
Vendor materials describe ISE as a complete NAC offering and as providing a broader policy engine, visibility features, and integrations such as pxGrid.