What you’ll learn
Who should enroll
- Network security engineers
- Network security architects
- ISE administrators
- Senior Security Operations Center (SOC) personnel responsible for Incidence Response
- Cisco integrators and partners
Technology areas
- Security
Training overview
Objectives
After taking this training, you should be able to:
- Describe the Cisco Identity Services Engine (ISE)
- Explain Cisco ISE deployment
- Describe Cisco ISE policy enforcement components
- Describe Cisco ISE policy configuration
- Troubleshoot Cisco ISE policy and third-party Network Access Device (NAD) support
- Configure guest access
- Configure hotspots and guest portals
- Describe the Cisco ISE profiler services
- Describe profiling best practices and reporting
- Configure a Cisco ISE BYOD solution
- Configure endpoint compliance
- Configure client posture services
- Configure Cisco ISE device administration
- Describe Cisco ISE TrustSec configurations
Prerequisites
To fully benefit from this training, you should have the following knowledge:
- Familiarity with the Cisco IOS® Software Command-Line Interface (CLI) for wired and wireless devices
- Familiarity with Cisco AnyConnect® Secure Mobility Client
- Familiarity with Microsoft Windows operating systems
- Familiarity with 802.1X
Recommended Cisco offerings that may help you meet these prerequisites:
- Cisco CCNP Security Certification training
Lab outline
- Configure Initial Cisco ISE Setup and System Certificate Usage
- Integrate Cisco ISE with Active Directory
- Configure Cisco ISE Policy for MAC Authentication Bypass (MAB)
- Configure Cisco ISE Policy for 802.1X
- Configure Guest Access
- Configure Hotspot and Self-Registered Guest Access
- Configure Sponsor-Approved and Fully Sponsored Guest Access
- Create Guest Reports
- Configure Profiling
- Customize the Cisco ISE Profiling Configuration
- Create Cisco ISE Profiling Reports
- Configure BYOD
- Manage a Lost or Stolen BYOD Device
- Configure Cisco ISE Compliance Services
- Configure Client Provisioning
- Configure Posture Policies
- Test and Monitor Compliance-Based Access
- Configure Cisco ISE for Basic Device Administration
- Configure Cisco ISE Command Authorization
- Configure Cisco TrustSec