SISE: Implementing and Configuring Cisco Identity Services Engine v4

Implementing and Configuring Cisco Identity Services Engine (SISE) v4.0 teaches you to deploy and use Cisco® Identity Services Engine (ISE) v3.x, an identity and access control policy platform that simplifies the delivery of consistent, highly secure access control across wired, wireless, and VPN connections. This 5-day hands-on course provides you with the knowledge and skills to implement and apply Cisco ISE capabilities to support use cases for Zero Trust security posture. These use cases include tasks such as policy enforcement, profiling services, web authentication and guest access services, BYOD, endpoint compliance services, and Terminal Access Controller Access Control Server (TACACS+) device administration. Through hands-on practice via lab exercises, you will learn how to use Cisco ISE to gain visibility into what is happening in your network, streamline security policy management, and contribute to operational efficiency.

What's Included

• Official Cisco courseware
• Remote lab access

Prerequisites

• Familiarity with Cisco IOS CLI for wired and wireless devices
• Familiarity with Cisco AnyConnect® Secure Mobility Client
• Familiarity with Microsoft Windows Operating Systems
• Familiarity with 802.1x

Course Objectives

After completing this course, you should be able to:

• Describe the Cisco Identity Services Engine (ISE)
• Explain Cisco ISE deployment
• Describe Cisco ISE policy enforcement components
• Describe Cisco ISE policy configuration
• Troubleshoot Cisco ISE policy and third-party Network Access Device (NAD) support
• Configure guest access
• Configure hotspots and guest portals
• Describe the Cisco ISE profiler services
• Describe profiling best practices and reporting
• Configure a Cisco ISE BYOD solution
• Configure endpoint compliance
• Configure client posture services
• Configure Cisco ISE device administration
• Describe Cisco ISE TrustSec configurations

Course Outline

Module 1: Introducing Cisco ISE Architecture

Module 2: Introducing Cisco ISE Deployment

Module 3: Introducing Cisco ISE Policy Enforcement Components

Module 4: Introducing Cisco ISE Policy Configuration

Module 5: Troubleshooting Cisco ISE Policy and Third-Party NAD Support

Module 6: Configuring Hotspots and Guest Portals

Module 7: Introducing the Cisco ISE Profiler

Module 8: Introducing Profiling Best Practices and Reporting

Configuring Cisco ISE BYOD

Introducing Cisco ISE Endpoint Compliance Services

Configuring Client Posture Services and Compliance

Working With Network Access Devices

Exploring Cisco TrustSec

Labs

• Lab 1: Configure Initial Cisco ISE Setup and System Certificate Usage
• Lab 2: Integrate Cisco ISE with Active Directory
• Lab 3: Configure Cisco ISE Policy for MAC Authentication Bypass (MAB)
• Lab 4: Configure Cisco ISE Policy for 802.1X
• Lab 5: Configure Guest Access
• Lab 6: Configure Hotspot and Self-Registered Guest Access
• Lab 7: Configure Sponsor-Approved and Fully Sponsored Guest Access
• Lab 8: Create Guest Reports
• Lab 9: Configure Profiling
• Lab 10: Customize the Cisco ISE Profiling Configuration
• Lab 11: Create Cisco ISE Profiling Reports
• Lab 12: Configure BYOD
• Lab 13: Blacklisting a Device
• Lab 14: Configure Compliance Services on Cisco ISE
• Lab 15: Configure Client Provisioning
• Lab 16: Configure Posture Policies
• Lab 17: Test and Monitor Compliance Based Access
• Lab 18: Configure Cisco ISE for Basic Device Administration
• Lab 19: Configure Cisco ISE Command Authorization
• Lab 20: Configure Cisco TrustSec