An engineer needs to configure Cisco ISE Profiling Services to authorize network access for IP speakers that require access to the intercom system. This traffic needs to be identified if the ToS bit is set to 5 and the destination IP address is the intercom system. What must be configured to accomplish this goal?

To identify network traffic based on specific IP header attributes like the Type of Service (ToS) bit and destination IP address, the NetFlow probe must be configured. Cisco Identity Services Engine (ISE) can be configured as a NetFlow collector. Network devices (like switches and routers) that support NetFlow can be configured to export flow data to the ISE Policy Service Node (PSN). This data contains detailed Layer 3 and Layer 4 information, including ToS values and destination addresses, which the ISE Profiling Service can then use in policies to classify endpoints like the IP speakers in this scenario.

A. NMAP: The NMAP probe is an active scanning tool used to discover an endpoint's operating system and open ports; it does not passively analyze traffic flows.
C. pxGrid: pxGrid is a framework for sharing contextual data between different security systems. It does not collect raw network traffic data for initial endpoint profiling.
D. RADIUS: The RADIUS probe collects attributes from RADIUS authentication and accounting packets (e.g., MAC address), not from the data plane traffic or IP headers.

1. Cisco Identity Services Engine Administrator Guide, Release 3.1, "Profiling Probes" section: "The NetFlow probe is a profiling probe that allows Cisco ISE to collect information about traffic flows from NetFlow-enabled network devices... You can create profiling policies that use the NetFlow attributes to classify endpoints. The NetFlow attributes that are supported in Cisco ISE are destination address, destination port, protocol, source address, source port, and ToS."

2. Cisco Identity Services Engine (ISE) Profiling Design Guide, "NetFlow" subsection under "Profiling Probes": "NetFlow is a protocol that collects IP traffic information from network devices such as routers and switches. Cisco ISE can be configured as a NetFlow collector to receive NetFlow packets from the network devices. The information contained in the NetFlow packets can be used to profile endpoints." This section further clarifies that NetFlow provides Layer 3/4 information necessary for the task described.