Course Description:
Learn to install, configure, and deploy ISE with labs written for ISE Version 3.x.
Implementing and Configuring Cisco Identity Services Engine (SISE) v3.x – This 5-day Cisco ISE training program discusses the Cisco Identity Services Engine, an identity and access control policy platform that provides a single policy plane across the entire organization, combining multiple services, including authentication, authorization, and accounting (AAA), posture, profiling, device onboarding, and guest management, into a single context-aware identity-based platform. This CCNP course provides students with the knowledge and skills to enforce security posture compliance for wired and wireless endpoints as well as enhance infrastructure security using the Cisco ISE.
When it comes to CCNP security, this is an ideal course for anyone who plans to work with the Cisco Identity Services Engine. Sign up for this Cisco ISE implementation course or one of our other Cisco ISE training courses today, and feel free to read below to learn more about course information.
NterOne labs have been updated to Cisco ISE Release v3.x. Â There is an extensive number of labs in this class. We recommend you have either 2 monitors or a tablet and PC while attending this class. You will need one for the student guide and the second to perform the lab procedures.
We also recommend you do all the connectivity tests that will be sent to you a few days before your class on the PC you will be using during class, as well as the internet connection to verify there are no restrictions that would cause issues with the class connectivity.
This course is a part of CCNP Security.
Course Objectives
Upon successful completion of this course, students will be able to meet these overall objectives:
- Describe Cisco ISE architecture, installation, and distributed deployment options
- Configure Network Access Devices (NADs), policy components, and basic authentication and authorization policies in Cisco ISE
- Implement Cisco ISE web authentication and guest services
- Deploy Cisco ISE profiling, posture, and client provisioning services
- Describe administration, monitoring, troubleshooting, and TrustSec SGA security
- Configure device administration using TACACS+ in Cisco ISE
Course Topics
Module 1: Introducing Cisco ISE Architecture and Deployment
- Lesson 1: Using Cisco ISE as a Network Access Policy Engine
- Lesson 2: Introducing Cisco ISE Deployment Models
Module 2: Cisco ISE Policy Enforcement
- Lesson 1: Introducing 802.1x and MAB Access: Wired and Wireless
- Lesson 2: Introducing Identity Management
- Lesson 3: Configuring Certificate Services
- Lesson 4: Introducing Cisco ISE Policy
- Lesson 5: Configuring Cisco ISE Policy Sets
- Lesson 6: Implementing Third-Party Network Access Device Support
- Lesson 7: Introducing Cisco TrustSec
- Lesson 8: Introducing EasyConnect
Module 3: Web Authentication and Guest Services
- Lesson 1: Introducing Web Access with Cisco ISE
- Lesson 2: Introducing ISE Guest Access Components
- Lesson 3: Configuring Guest Access Settings
- Lesson 4: Configuring Portals: Sponsors and Guests
Module 4: Cisco ISE Profiler
- Lesson 1: Introducing Cisco ISE Profiler
- Lesson 2: Configuring Cisco ISE Profiling
Module 5: Cisco ISE BYOD
- Lesson 1: Introducing the Cisco ISE BYOD Process
- Lesson 2: Describing BYOD Flow
- Lesson 3: Configuring My Devices Portal Settings
- Lesson 4: Configuring Certificates in BYOD Scenarios
Module 6: Cisco ISE Endpoint Compliance Services
- Lesson 1: Introducing Endpoint Compliance
- Lesson 2: Configuring Client Posture Services and Provisioning in Cisco ISE
Module 7: Cisco ISE with AMP and VPN-Based Services
- Lesson 1: Introducing VPN Access Using Cisco ISE
- Lesson 2: Configuring Cisco AMP for ISE
Module 8: Cisco ISE Integrated Solutions with APIs
- Lesson 1: Introducing Location-Based Authorization
- Lesson 2: Introducing Cisco ISE pxGrid
Module 9: Working with Network Access Devices
- Lesson 1: Configuring TACACS+ for Cisco ISE Device Administration
Module 10: Cisco ISE Design
- Lesson 1: Designing and Deployment Best Practices
- Lesson 2: Performing Cisco ISE Installation and Configuration Best Practices
- Lesson 3: Deploying Failover and High-Availability
Module 11: Configuring Third Party NAD Support
- Lesson 1: Configuring Third-Party NAD Support
Lab Outline
Current Lab Software is ISE Version 3.x
Labs are designed to assure learners a whole practical experience, through the following practical activities:
- Lab 1: Configure Initial Cisco ISE Setup, GUI Familiarization, System Certificate Usage
- Lab 2: Integrate Cisco ISE with Active Directory
- Lab 3: Configure Basic Policy on Cisco ISE
- Lab 4: Configure Conversion to Policy Sets
- Lab 5: Configure Guest Access
- Lab 6: Configure Guest Access Operations
- Lab 7: Create Guest Reports
- Lab 8: Configure Profiling
- Lab 9: Customize the Cisco ISE Profiling Configuration
- Lab 10: Create Cisco ISE Profiling Reports
- Lab 11: Configure BYOD
- Lab 12: Blacklisting a Device
- Lab 13: Configure Compliance Services on Cisco ISE
- Lab 14: Configure Client Provisioning
- Lab 15: Configure Cisco ISE for Basic Device Administration
- Lab 16: Configure TACACS+ Command Authorization
Target Audience
The primary audience for this course is as follows:
- ISE Administrators / Engineers
- Wireless Administrators / Engineers
- Consulting Systems Engineers
- Technical / Wireless / BYOD / Security Solutions Architects
- ATP partner systems and field engineers
- Systems integrators who install and implement the Cisco Identity Service Engine v3 x
Prerequisites
The knowledge and skills that a learner should have before attending this course are as follows:
- Familiarity with Cisco IOS CLI
- Familiarity with Cisco ASA
- Familiarity with Cisco VPN clients
- Familiarity with Microsoft Windows Operating Systems
- Familiarity with 802.1x
Inclusions
With CCS Learning Academy, you’ll receive:
- Certified Instructor-led training
- Official Training Seminar Student Handbook
- Collaboration with classmates (not currently available for self-paced course)
- Real-world learning activities and scenarios
- Exam scheduling support*
- Enjoy job placement assistance for the first 12 months after course completion.
- This course is eligible for CCS Learning Academy’s Learn and Earn Program: get a tuition fee refund of up to 50% if you are placed in a job through CCS Global Tech’s Placement Division*
- Government and Private pricing available.*
*For more details call:Â 858-208-4141Â or email:Â training@ccslearningacademy.com; sales@ccslearningacademy.com