A. Cyber Threat Defense for user group control by leveraging Netflow exported from the Cisco switches and identity information from ISE

B. Identity-based ACLs preconfigured on the Cisco switches with user identities provided by ISE

C. Cisco Security Group Access Policies to control access based on SGTs assigned to different user groups

D. MACsec in Multiple-Host Mode in order to encrypt traffic at each hop of the network infrastructure