Implementing and Configuring Cisco Identity Services Engine Training (SISE) v3.0

Print Friendly, PDF & Email
Introduction

Implementing and Configuring Cisco Identity Services Engine Training (SISE) v3.0 Course Hands-on

The Implementing and Configuring Cisco Identity Services Engine Training (SISE) v3.0 course shows you how to deploy and use Cisco® Identity Services Engine (ISE) v2.4, an identity and access control policy platform that simplifies the delivery of consistent, highly secure access control across wired, wireless, and VPN connections.

This hands-on Implementing and Configuring Cisco Identity Services Engine Training (SISE) v3.0 course provides you with the knowledge and skills to implement and use Cisco ISE, including policy enforcement, profiling services, web authentication and guest access services, BYOD, endpoint compliance services, and TACACS+ device administration. Through expert instruction and hands-on practice, you will learn how to use Cisco ISE to gain visibility into what is happening in your network, streamline security policy management, and contribute to operational efficiency.

Duration: 5 days

Implementing and Configuring Cisco Identity Services Engine Training (SISE) v3.0 Related Courses

Customize It!

• We can adapt this Implementing and Configuring Cisco Identity Services Engine Training (SISE) course to your group’s background and work requirements at little to no added cost.
• If you are familiar with some aspects of this Implementing and Configuring Cisco Identity Services Engine Training (SISE) course, we can omit or shorten their discussion.
• We can adjust the emphasis placed on the various topics or build the Implementing and Configuring Cisco Identity Services Engine Training (SISE) course around the mix of technologies of interest to you (including technologies other than those included in this outline).
• If your background is nontechnical, we can exclude the more technical topics, include the topics that may be of special interest to you (e.g., as a manager or policy-maker), and present the Implementing and Configuring Cisco Identity Services Engine Training (SISE) course in manner understandable to lay audiences.

Audience / Target Group

The target audience for this Implementing and Configuring Cisco Identity Services Engine Training (SISE) v3.0 course is defined here:

• ISE Administrators/Engineers
• Wireless Administrators/Engineers
• Consulting Systems Engineers
• Technical/Wireless/BYOD/Security Solutions Architects
• ATP partner systems and field engineers
• Systems integrators who install and implement the Cisco Identity Service Engine

Implementing and Configuring Cisco Identity Services Engine Training (SISE) - Prerequisites:

It is recommended, but not required, to have the following skills and knowledge before attending this Implementing and Configuring Cisco Identity Services Engine Training (SISE) v3.0 course:

• Familiarity with the Cisco IOS® Software command-line interface (CLI)
• Familiarity with Cisco AnyConnect® Secure Mobility Client
• Familiarity with Microsoft Windows operating systems
• Familiarity with 802.1X

Implementing and Configuring Cisco Identity Services Engine Training (SISE) - Objectives:

After completing this Implementing and Configuring Cisco Identity Services Engine Training v2.1 (SISE) course, attendees will be able to:

• Describe Cisco ISE deployments, including core deployment components and how they interact to create a cohesive security architecture. Describe the advantages of such a deployment and how each Cisco ISE capability contributes to these advantages.
• Describe concepts and configure components related to 802.1X and MAC Authentication Bypass (MAB) authentication, identity management, and certificate services.
• Describe how Cisco ISE policy sets are used to implement authentication and authorization, and how to leverage this capability to meet the needs of your organization.
• Describe third-party network access devices (NADs), Cisco TrustSec®, and Easy Connect.
• Describe and configure web authentication, processes, operation, and guest services, including guest access components and various guest access scenarios.
• Describe and configure Cisco ISE profiling services, and understand how to monitor these services to enhance your situational awareness about network-connected endpoints. Describe best practices for deploying this profiler service in your specific environment.
• Describe BYOD challenges, solutions, processes, and portals. Configure a BYOD solution, and describe the relationship between BYOD processes and their related configuration components. Describe and configure various certificates related to a BYOD solution.
• Describe the value of the My Devices portal and how to configure this portal.
• Describe endpoint compliance, compliance components, posture agents, posture deployment and licensing, and the posture service in Cisco ISE.
• Describe and configure TACACS+ device administration using Cisco ISE, including command sets, profiles, and policy sets. Understand the role of TACACS+ within the authentication, authentication, and accounting (AAA) framework and the differences between the RADIUS and TACACS+ protocols.
• Migrate TACACS+ functionality from Cisco Secure Access Control System (ACS) to Cisco ISE, using a migration tool.

Implementing and Configuring Cisco Identity Services Engine Training (SISE) - Course Content:

Introducing Cisco ISE Architecture and Deployment

Using Cisco ISE as a Network Access Policy Engine
Cisco ISE Use Cases
Describing Cisco ISE Functions
Cisco ISE Deployment Models
Context Visibility

Cisco ISE Policy Enforcement

Using 802.1X for Wired and Wireless Access
Using MAC Authentication Bypass for Wired and Wireless Access
Introducing Identity Management
Configuring Certificate Services
Introducing Cisco ISE Policy
Implementing Third-Party Network Access Device Support
Introducing Cisco TrustSec
TrustSec Configuration
Easy Connect

Web Authentication and Guest Services

Introducing Web Access with Cisco ISE
Introducing Guest Access Components
Configuring Guest Access Services
Configure Sponsor and Guest Portals

Cisco ISE Profiler

Introducing Cisco ISE Profiler
Profiling Deployment and Best Practices

Cisco ISE BYOD

Introducing the Cisco ISE BYOD Process
Describing BYOD Flow
Configuring the My Devices Portal
Configuring Certificates in BYOD Scenarios

Cisco ISE Endpoint Compliance Services

Introducing Endpoint Compliance Services
Configuring Client Posture Services and Provisioning

Working with Network Access Devices

Cisco ISE TACACS+ Device Administration
Configure TACACS+ Device Administration Guidelines and Best Practices
Migrating from Cisco ACS to Cisco ISE

Labs:

Initial Configuration of Cisco ISE
Complete Cisco ISE GUI Setup
Integrate Cisco ISE with Active Directory
Integrating Cisco ISE with a second Microsoft Active Directory
Basic Policy Configuration
Configure Guest Access
Guest Access Operations
Guest Reports
Configuring Profiling
Customizing the Cisco ISE Profiling Configuration
ISE Profiling Reports
BYOD Configuration
Device Blacklisting
Compliance
Configuring Client Provisioning
Configuring Posture Policies
Testing and Monitoring Compliance Based Access
Compliance Policy Testing
MDM Integration with Cisco ISE
MDM Access and Configuration
Client Access with MDM
Using Cisco ISE for VPN Access
Configuring Backups and Patching
Configuring Administrative Access
Review of General Tools
Report Operations
Classroom Training
Duration 5 days
Price
United States: US$ 3,995
Cisco Learning Credits: 40 CLC
Enroll now
Online Training
Duration 5 days
Price
United States: US$ 3,995
Cisco Learning Credits: 40 CLC
Enroll now

Request More Information

Time Frame: 0-3 Months4-12 Months

No Comments Yet.

Leave a comment

0