Implementing and Configuring Cisco Identity Services

Implementing and Configuring Cisco Identity Services Engine (SISE) V4.0

​The Implementing and Configuring Cisco Identity Services Engine (SISE) v4.0 course teaches you to deploy and use Cisco® Identity Services Engine (ISE) v3.x, an identity and access control policy platform that simplifies the delivery of consistent, highly secure access control across wired, wireless, and VPN connections. This hands-on course provides you with the knowledge and skills to implement and apply Cisco ISE capabilities to support use cases for Zero Trust security posture. These use cases include tasks such as policy enforcement, profiling services, web authentication and guest access services, BYOD, endpoint compliance services, and Terminal Access Controller Access Control Server (TACACS+) device administration. Through hands-on practice via lab exercises, you will learn how to use Cisco ISE to gain visibility into what is happening in your network, streamline security policy management, and contribute to operational efficiency. This course helps you prepare to take the Implementing and Configuring Cisco Identity Services Engine (300-715 SISE) exam, which leads to CCNP® Security and the Cisco Certified Specialist - Security Identity Management Implementation certifications. This course also earns you 40 Continuing Education (CE) credits toward recertification

Intended Audience

• Network security engineers
• Senior Security Operations
• Network security architects
• ISE administrators

Course Prerequisite

Required

• Familiarity with the Cisco IOS® Software Command-Line Interface (CLI) for wired and wireless devices
• Familiarity with Cisco AnyConnect® Secure Mobility Client
• Familiarity with 802.1X
• Familiarity with Microsoft Windows operating systems

Course Objectives

• Describe the Cisco Identity Services Engine (ISE)
• Explain Cisco ISE deployment
• Describe Cisco ISE policy enforcement components
• Describe Cisco ISE policy configuration
• Troubleshoot Cisco ISE policy and third-party Network Access Device (NAD) support
• Configure guest access
• Configure hotspots and guest portals
• Describe the Cisco ISE profiler services
• Describe profiling best practices and reporting
• Configure a Cisco ISE BYOD solution
• Configure endpoint compliance
• Configure client posture services
• Configure Cisco ISE device administration
• Describe Cisco ISE TrustSec configurations

Course Outline

1. Introducing Cisco ISE Architecture
2. Introducing Cisco ISE Deployment
3. Introducing Cisco ISE Policy Enforcement Components
4. Introducing Cisco ISE Policy Configuration
5. Troubleshooting Cisco ISE Policy and Third-Party NAD Support
6. Introducing Web Authentication and Guest Services
7. Configuring Hotspots and Guest Portals
8. Introducing the Cisco ISE Profiler
9. Introducing Profiling Best Practices and Reporting
10. Configuring Cisco ISE BYOD
11. Introducing Cisco ISE Endpoint Compliance Services
12. Configuring Client Posture Services and Compliance
13. Working With Network Access Devices
14. Exploring Cisco TrustSec
15. Lab Outline
    1. Configure Initial Cisco ISE Setup and System Certificate Usage
    2. Integrate Cisco ISE with Active Directory
    3. Configure Cisco ISE Policy for MAC Authentication Bypass (MAB)
    4. Configure Cisco ISE Policy for 802.1X
    5. Configure Guest Access
    6. Configure Hotspot and Self-Registered Guest Access
    7. Configure Sponsor-Approved and Fully Sponsored Guest Access
    8. Create Guest Reports
    9. Configure Profiling
    10. Customize the Cisco ISE Profiling Configuration
    11. Create Cisco ISE Profiling Reports
    12. Configure BYOD
    13. Manage a Lost or Stolen BYOD Device
    14. Configure Cisco ISE Compliance Services
    15. Configure Client Provisioning
    16. Configure Posture Policies
    17. Test and Monitor Compliance-Based Access
    18. Configure Cisco ISE for Basic Device Administration
    19. Configure Cisco ISE Command Authorization
    20. Configure Cisco TrustSec