SISE: Implementing and Configuring Cisco Identity Services Engine v3

Implementing and Configuring Cisco Identity Services Engine (SISE) v3.0 is a 5-day Cisco ISE training program that discusses the Cisco Identity Services Engine, an identity and access control policy platform that provides a single policy plane across the entire organization, combining multiple services, including authentication, authorization, and accounting (AAA), posture, profiling, device onboarding, and guest management, into a single context-aware identity-based platform. This CCNA course provides students with the knowledge and skills to enforce security posture compliance for wired and wireless endpoints as well as enhance infrastructure security using the Cisco ISE.

What's Included

• Official Cisco courseware
• Remote lab access

Prerequisites

• Familiarity with Cisco IOS CLI
• Familiarity with Cisco ASA
• Familiarity with Cisco VPN clients
• Familiarity with Microsoft Windows Operating Systems
• Familiarity with 802.1x

Course Objectives

After completing this course, you should be able to:

• Describe Cisco ISE architecture, installation, and distributed deployment options
• Configure Network Access Devices (NADs), policy components, and basic authentication and authorization policies in Cisco ISE
• Implement Cisco ISE web authentication and guest services
• Deploy Cisco ISE profiling, posture, and client provisioning services
• Describe administration, monitoring, troubleshooting, and TrustSec SGA security
• Configure device administration using TACACS+ in Cisco ISE

Course Outline

Module 1: Introducing Cisco ISE Architecture and Deployment

• Lesson 1: Using Cisco ISE as a Network Access Policy Engine
• Lesson 2:Cisco ISE Use Cases
• Lesson 3:Describing Cisco ISE Functions
• Lesson 4:Cisco ISE Deployment Models
• Lesson 5:Context Visibility

Module 2: Cisco ISE Policy Enforcement

• Lesson 1: Using 802.1X for Wired and Wireless Access
• Lesson 2: Using MAC Authentication Bypass for Wired and Wireless Access
• Lesson 3: Introducing Identity Management
• Lesson 4: Configuring Certificate Services
• Lesson 5: Introducing Cisco ISE Policy
• Lesson 6: Implementing Third-Party Network Access Device Support
• Lesson 7: Introducing Cisco TrustSec
• Lesson 8: Cisco TrustSec Configuration
• Lsson 9: Easy Connect

Module 3: Web Authentication and Guest Services

• Lesson 1: Introducing Web Access with Cisco ISE
• Lesson 2: Introducing ISE Guest Access Components
• Lesson 3: Configuring Guest Access Settings< /li>
• Lesson 4: Configuring Portals: Sponsors and Guests

Module 4: Cisco ISE Profiler

• Lesson 1: Introducing Cisco ISE Profiler
• Lesson 2: Configuring Cisco ISE Profiling

Module 5: Cisco ISE BYOD

• Lesson 1: Introducing the Cisco ISE BYOD Process
• Lesson 2: Describing BYOD Flow
• Lesson 3: Configuring the My Devices Portal
• Lesson 4: Configuring Certificates in BYOD Scenarios

Module 6: Cisco ISE Endpoint Compliance Services

• Lesson 1: Introducing Endpoint Compliance Services
• Lesson 2: Configuring Client Posture Services and Provisioning in Cisco ISE

Module 7: Working with Network Access Devices

• Lesson 1: Review TACACS+
• Lesson 2: Cisco ISE TACACS+ Device Administration
• Lesson 3: Configure TACACS+ Device Administration
• Lesson 4: TACACS+ Device Administration Guidelines and Best Practices
• Lesson 5: Migrating from Cisco ACS to Cisco ISE

Labs

• Lab 1: Configure Initial Cisco ISE setup, GUI Familiarization, system certificate usage
• Lab 2: Integrate Cisco ISE with Active Directory
• Lab 3: Configure Basic Policy on Cisco ISE
• Lab 4: Configure Conversion to Policy Sets
• Lab 5: Configure Access Policy for Easy Connect
• Lab 6: Configure Guest Access
• Lab 7: Configure Guest Access Operations
• Lab 8: Create Guest Reports
• Lab 9: Configure Profiling
• Lab 10: Customize the Cisco ISE Profiling Configuration
• Lab 11: Create Cisco ISE Profiling Reports
• Lab 12: Configure BYOD
• Lab 13: Blacklisting a Device
• Lab 14: Configure Compliance Services on Cisco ISE
• Lab 15: Configure Client Provisioning
• Lab 16: Configure Posture Policies
• Lab 17: Test and Monitor Compliance Based Access
• Lab 18: Test Compliance Policy
• Lab 19: Configure Cisco ISE for VPN Access
• Lab 20: Configure Threat-Centric NAC using Cisco AMP
• Lab 21: Configure Cisco ISE pxGrid and Cisco WSA Integration
• Lab 22: Configure Cisco ISE for Basic Device Administration
• Lab 23: Configure TACACS+ Command Authorization