Toll Free: (844) 462-5277

Courses Detailed

SISE v1.1:Implementing Cisco Identity Service Engine Secure Solutions
Duration: 5 days Price: $3750

Implementing and Configuring Cisco Identity Services Engine (SISE v1.1) is a 5-day course based on Cisco Identity Services Engine (ISE) version 1.1.1, a next-generation identity and access control policy platform that provides a single policy plane across the entire organization combining multiple services, including authentication, authorization, and accounting (AAA), posture, profiling, device on-boarding, and guest management, into a single context-aware identity-based platform. The training provides learners with the knowledge and skills to enforce security posture compliance for wired and wireless endpoints and enhance infrastructure security using the Cisco ISE.

In addition to the normal content covered in the SISE v1.1 course, exclsuive enhancements added: Additional lecture material covering the Single & Dual Wireless SSID BYOD (Bring Your Own Device) configuration has been added to the course. Enhanced 'Real World' BYOD lab exercises using Mobile Devices (Apple iPads) has also been added. In addition to the BYOD enhancements, 'Real World' lab exercises covering MAB, 802.1x-Wired, 802.1 x-Wireless, Web Authentication, Posture Assessment, & Profiling are also included.

Upon completing this course, the learner will be able to meet these overall objectives:

  • Describe Cisco ISE architecture, installation, and distributed deployment options
  • Configure Network Access Devices (NADs), policy components, and basic authentication and authorization policies in Cisco ISE
  • Implement Cisco ISE web authentication and guest services
  • Deploy Cisco ISE profiling, posture and client provisioning services
  • Describe administration, monitoring, troubleshooting, and TrustSec SGA security

The primary audience for this course is as follows:

  • Employee
  • Channel Partner or Reseller
  • Customer

The knowledge and skills that a learner must have before attending this course are as follows:

  • CCNA Security certification
  • Foundation-level network knowledge and skills necessary to install, configure, operate, and troubleshoot network devices and applications
  • Foundation-level wireless knowledge and skills
  • Basic knowledge of Cisco IOS networking and concepts

Course Outline

Course Introduction

  • Overview
  • Course Goal and Objectives
  • Course Flow

Module 1: Cisco ISE Product Overview

Lesson 1: Introducing the Cisco ISE

Lesson 2: Getting Started with Cisco ISE

    • Overview of Cisco TrustSec
    • Overview of Cisco ISE
    • Cisco ISE Architecture
    • Cisco ISE Deployment Options
    • Installing Cisco ISE
    • Network Time Protocol
    • Cisco ISE Certificates
    • Monitoring Basics
    • Configuring and Verifying Cisco ISE for Distributed Deployment

Module 2: Cisco ISE Authentication and Authorization

Lesson 1: Configuring Basic Access

Lesson 2: Understanding External Authentication

Lesson 3: Using Cisco ISE Dictionaries

Lesson 4: Configuring Authorization

    • NAD Overview
    • IEEE 802.1X Primer
    • Cisco Switch Configuration
    • Cisco WLC Configuration
    • Cisco ASA Appliance Configuration
    • Cisco ISE Authentication Process
    • Internal Databases
    • Simple Authentication
    • Rule-Based Authentication
    • Sessions in Cisco ISE
    • External Authentication Process
    • Active Directory
    • Lightweight Directory Access Protocol
    • RADIUS
    • Certificates
    • Identity Source Sequencing
    • Authentication Support and Performance
    • Overview of Cisco ISE Dictionaries
    • Read-Only Dictionaries
    • Administrable Dictionaries
    • RADIUS Vendor Dictionaries
    • Authorization Policies and Components
    • Authorization Policy Configuration
    • Exception Policies

Module 3: Web Authentication and User Access Management

Lesson 1: Implementing Web Authentication

Lesson 2: Implementing Guest Services

    • Web Authentication Overview
    • Configure Cisco ISE Web Authentication
    • Verifying Web Authentication
    • Guest Services Overview
    • Preparing the Deployment
    • Configuring Sponsor Portal
    • Configuring Guest Portal
    • Creating Guest Accounts
    • Verifying Guest Accounts

Module 4: Cisco ISE Profiler, Posture, and Endpoint Protection Services

Lesson 1: Implementing Cisco ISE Profiler Service

Lesson 2: Implementing Cisco ISE Posture Service

Lesson 3: Implementing Cisco ISE Endpoint Protection Services

Lesson 4: Implementing BYOD

    • Profiler Service Overview
    • Configuring Profiling on Cisco ISE
    • Verifying Profiling
    • Posture Service Overview
    • Configuring Cisco ISE for Client Provisioning
    • Adapting the Authorization Policy for Posture Compliance
    • Configuring the Posture System Settings
    • Configuring the Posture Policy
    • Verifying the Posture Service
    • EPS Overview
    • Configuring EPS
    • Monitoring EPS
    • BYOD Overview
    • Designing BYOD
    • Dual SSID BYOD Design
    • Device Onboarding User Experience
    • Single SSID BYOD Configuration-Enhanced
    • Dual SSID BYOD Configuration-Enhanced

Module 5: Reports, Monitoring, Troubleshooting, and Security

Lesson 1: Implementing Inline Posture and TrustSec Security

Lesson 2: Describing the Cisco ISE Architecture

Lesson 3: Performing Cisco ISE Administration and Maintenance

Lesson 4: Using Cisco ISE Reporting, Monitoring, and Troubleshooting

    • Inline Posture
    • Security Group Access
    • MAC Security
    • Cisco ISE Deployment Types
    • Deploying Monitoring Personas
    • Preparing the Network Infrastructure
    • Role-Based Access Control
    • Cisco ISE Licensing
    • Backing Up and Restoring the System Configuration
    • Cisco ISE Dashboard Monitoring
    • Implementing Logging
    • Managing Alarms
    • Cisco ISE Reports
    • Troubleshooting the Network
    • Backing Up and Restoring the Monitoring Database

 

Lab Outline

 

  • Lab 1-1: Completing the Initial Setup Configuration
    Lab 1-2: Certificate Operations
    Lab 1-3: Cisco ISE Node Deployment
    Lab 2-1: Configure and Add Network Access Devices to Cisco ISE
    Lab 2-2: Configure External Identity Sources
    Lab 2-3: Configuring Cisco ISE for MAC Authentication Bypass (MAB)
    Lab 2-4: Configuring Cisco ISE for Wired 802.1X Authentication
    Lab 2-5: Configuring Cisco ISE for Wireless 802.1X Authentication
    Lab 3-1: Configuring Cisco ISE for Web Authentication
    Lab 3-2: Configuring Cisco ISE Guest Services
    Lab 4-1: Configuring Cisco ISE for Profiling
    Lab 4-2: Configuring Cisco ISE for Posture Assessment
    Lab 4-3: Configuring Cisco ISE Endpoint Protection Services
    Lab 4-4: Configure Cisco ISE for Single SSID Wireless BYOD configuration
    Lab 5-1: Logging Setup
    Lab 5-2: Cisco ISE Reporting
    Lab 5-3: Working with Cisco ISE Monitoring and Troubleshooting

Implementing and Configuring Cisco Identity Services Engine (SISE v1.1) is a 5-day course based on Cisco Identity Services Engine (ISE) version 1.1.1, a next-generation identity and access control policy platform that provides a single policy plane across the entire organization combining multiple services, including authentication, authorization, and accounting (AAA), posture, profiling, device on-boarding, and guest management, into a single context-aware identity-based platform. The training provides learners with the knowledge and skills to enforce security posture compliance for wired and wireless endpoints and enhance infrastructure security using the Cisco ISE.

In addition to the normal content covered in the SISE v1.1 course, exclsuive enhancements added: Additional lecture material covering the Single & Dual Wireless SSID BYOD (Bring Your Own Device) configuration has been added to the course. Enhanced 'Real World' BYOD lab exercises using Mobile Devices (Apple iPads) has also been added. In addition to the BYOD enhancements, 'Real World' lab exercises covering MAB, 802.1x-Wired, 802.1 x-Wireless, Web Authentication, Posture Assessment, & Profiling are also included.

Schedule

Cisco:Implementing Cisco Identity Service Engine Secure Solutions

SISE v1.1:Implementing Cisco Identity Service Engine Secure Solutions

Duration: 5days

Price: $3750

Location

Starts

Ends

From

Ends

Live Online

05/18/2018

05/22/2018

9:00am CT

5:00pm CT

Columbia, MD

06/01/2018

06/05/2018

9:00am ET

5:00pm ET

Cleveland, OH

06/01/2018

06/05/2018

9:00am ET

5:00pm ET

Glendale, CA

06/01/2018

06/05/2018

9:00am PT

5:00pm PT

Irvine, CA

06/08/2018

06/12/2018

9:00am PT

5:00pm PT

Overland Park, KS

06/15/2018

06/19/2018

9:00am ET

5:00pm ET

Live Online

06/22/2018

06/26/2018

9:00am CT

5:00pm CT

Louisville, KY

06/22/2018

06/26/2018

9:00am ET

5:00pm ET

Seattle, WA

07/13/2018

07/17/2018

9:00am PT

5:00pm PT

New York, NY

07/13/2018

07/17/2018

9:00am ET

5:00pm ET