SISE - Implementing and Configuring Cisco Identity Services Engine v3.0

Module 1: Introducing Cisco ISE Architecture and Deployment

• Lesson 1: Using Cisco ISE as a Network Access Policy Engine
• Lesson 2: Introducing Cisco ISE Deployment Models

Module 2: Cisco ISE Policy Enforcement

• Lesson 1: Introducing 802.1x and MAB Access: Wired and Wireless
• Lesson 2: Introducing Identity Management
• Lesson 3: Configuring Certificate Services
• Lesson 4: Introducing Cisco ISE Policy
• Lesson 5: Configuring Cisco ISE Policy Sets
• Lesson 6: Implementing Third-Party Network Access Device Support
• Lesson 7: Introducing Cisco TrustSec
• Lesson 8: Introducing EasyConnect

Module 3: Web Authentication and Guest Services

• Lesson 1: Introducing Web Access with Cisco ISE
• Lesson 2: Introducing ISE Guest Access Components
• Lesson 3: Configuring Guest Access Settings
• Lesson 4: Configuring Portals: Sponsors and Guests

Module 4: Cisco ISE Profiler

• Lesson 1: Introducing Cisco ISE Profiler
• Lesson 2: Configuring Cisco ISE Profiling

Module 5: Cisco ISE BYOD

• Lesson 1: Introducing the Cisco ISE BYOD Process
• Lesson 2: Describing BYOD Flow
• Lesson 3: Configuring My Devices Portal Settings
• Lesson 4: Configuring Certificates in BYOD Scenarios

Module 6: Cisco ISE Endpoint Compliance Services

• Lesson 1: Introducing Endpoint Compliance
• Lesson 2: Configuring Client Posture Services and Provisioning in Cisco ISE

Module 7: Cisco ISE with AMP and VPN-Based Services

• Lesson 1: Introducing VPN Access Using Cisco ISE
• Lesson 2: Configuring Cisco AMP for ISE

Module 8: Cisco ISE Integrated Solutions with APIs

• Lesson 1: Introducing Location-Based Authorization
• Lesson 2: Introducing Cisco ISE pxGrid

Module 9: Working with Network Access Devices

• Lesson 1: Configuring TACACS+ for Cisco ISE Device Administration

Module 10: Cisco ISE Design

• Lesson 1: Designing and Deployment Best Practices
• Lesson 2: Performing Cisco ISE Installation and Configuration Best Practices
• Lesson 3: Deploying Failover and High-Availability

Module 11: Configuring Third Party NAD Support

• Lesson 1: Configuring Third-Party NAD Support

• ISE deployment options including node types, personas, and licensing
• Install certificates into ISE using a Windows 2012 Certificate Authority (CA)
• Configure the Local and Active Directory Based Identity Store and use of Identity Source Sequences
• Configure AAA clients and network device groups
• Implement Policy Sets to streamline Authentication and Authorization in the organization
• Deploy EasyConnect as an alternative to 802.1X port-based authentication
• Implement 802.1X for wired and wireless networks using the AnyConnect 4.x NAM module, the latest dot1x commands on a catalyst switch, and version 8.4 of the vWLC
• Configure policies to allow MAC Authentication Bypass (MAB) of endpoints
• Use central web authentication (CWA) for redirection of legitimate domain users who need to register devices on the network using MAC addresses (device registration)
• Configure hotspot guest access, self-registration guest access, and sponsored guest access
• Configure profiler services in ISE and use newer probes available in IOS switch code 15.x as well as vWLC 8.4 code
• Work with profiling feeds, logical profiles, and building profiling conditions to match network endpoints
• Configure posture assessments using the new Cisco AnyConnect Secure Mobility 4.x posture module
• Configure Cisco ISE as a TACACS+ Server for Device Administration with Command Authorization
• Configure Cisco ISE to integrate with a 5500-X ASA and a Catalyst Switch for TrustSec and implement end-to-end Security Group Tagging (SGT) and Security Group Access Control (SGACL)
• Maintenance, best practices, and logging

Current Lab Software is ISE Version 3.x

Labs are designed to assure learners a whole practical experience, through the following practical activities:

• Lab 1: Configure Initial Cisco ISE Setup, GUI Familiarization, System Certificate Usage
• Lab 2: Integrate Cisco ISE with Active Directory
• Lab 3: Configure Basic Policy on Cisco ISE
• Lab 4: Configure Conversion to Policy Sets
• Lab 5: Configure Guest Access
• Lab 6: Configure Guest Access Operations
• Lab 7: Create Guest Reports
• Lab 8: Configure Profiling
• Lab 9: Customize the Cisco ISE Profiling Configuration
• Lab 10: Create Cisco ISE Profiling Reports
• Lab 11: Configure BYOD
• Lab 12: Blacklisting a Device
• Lab 13: Configure Compliance Services on Cisco ISE
• Lab 14: Configure Client Provisioning
• Lab 15: Configure Cisco ISE for Basic Device Administration
• Lab 16: Configure TACACS+ Command Authorization

The learner is expected to have the following skills and knowledge before attending this course:

• CCNA Security or equivalent level of experience with Cisco devices
• Foundation-level wireless knowledge and skills
• Familiarity with Microsoft Windows and Microsoft Active Directory
• Familiarity with 802.1X
• Familiarity with Cisco ASA

• Consulting systems engineers
• Technical solutions architects
• Integrators who install and implement Cisco ISE version 2.4
• End users (Cisco customers) desiring the knowledge to install, configure, and deploy Cisco ISE 2.4
• Cisco channel partners and field engineers who need to meet the educational requirements to attain Authorized Technology Partner (ATP) authorization to sell and support Cisco ISE