> > > SISE

Implementing and Configuring Cisco Identity Services Engine (SISE)

Course Description Schedule Course Outline
 

Student Testimonials

"Excellent entry level course for new hires. Also, good refresher course for more experienced technicians."
- John Wray

Course Content

Implementing and Configuring Cisco Identity Services Engine v2.1 (SISE) is an identity and access control policy platform that provides a single policy plane across the entire organization, combining multiple services into a single context-aware identity-based platform. You will learn how to configure and administer many of the services, including authentication, authorization and accounting (AAA), posture, profiling, device on-boarding and guest management. You will also learn the knowledge and skills to enforce security posture compliance for wired and wireless endpoints and enhance infrastructure security using the Cisco ISE.

Who should attend

  • ISE Administrators/Engineers
  • Wireless Administrators/Engineers
  • Consulting Systems Engineers
  • Technical/Wireless/BYOD/Security Solutions Architects
  • ATP partner systems and field engineers
  • Systems integrators who install and implement the Cisco Identity Service Engine version 2.1

Do you belong in SISE? Meet Carson.

Carson is a wireless administrator for a corporation in Durham, NC. Last year, his company began expressing a need to better manage its network and those utilizing it. That’s when Carson saw an opportunity at Fast Lane. Understanding the value of SISE, Carson enrolled in Fast Lane’s SISE training. Upon completing the 5-day course, Carson was able to return to work and successfully implement an ISE architecture for his business and allow it to control every single detail of its network and network users.

Prerequisites

Course Objectives

  • Describe Cisco ISE architecture, installation, and distributed deployment options
  • Configure Network Access Devices (NADs), policy components, and basic authentication and authorization policies in Cisco ISE - Implement Cisco ISE web authentication and guest services
  • Deploy Cisco ISE profiling, posture and client provisioning services
  • Describe administration, monitoring, troubleshooting, and TrustSec SGA security
  • Configure device administration using TACACS+ in Cisco ISE

Follow On Courses

Outline: Implementing and Configuring Cisco Identity Services Engine (SISE)

Module 1: Introducing Cisco ISE Architecture and Deployment

  • Security challenges
  • Cisco ISE solutions Use Cases
    • Guest use
    • BYOD
    • Profiling
    • Compliance
    • Security group access
  • Secure Access Control
  • ISE function
  • ISE deployment components
    • Admin node
    • Policy service node
    • Monitoring node
    • pxGrid Services
    • Policy synchronization
    • Deployment options
  • Context visibility
    • Benefits
    • Wizard
    • Streamline wizard

Module 2: Cisco ISE Policy Enforcement

  • IEEE 802.1X primeer
  • MAC authentication bypass
  • 802.1X and MAB
  • Identity sources
  • Multi-AD overview and configuration
  • Lightweight directory access protocol
  • RADIUS
  • SAMLv2
  • Identity source sequence
  • Certification authority services
  • Authentication and authorization process
  • Exception policies and policy sets
  • Global vs local exception processing
  • Third-party NAD support
  • Cisco TrustSec
  • Easy connect
    • Overview
    • Modes and flows
    • Configuration

Module 3: Web Auth & Guest Services

  • Web authentication overview
  • Guest access services overview
  • Guest access settings
  • ISE sponsor components and configuration

Module 4: Cisco ISE Profiler

  • Profiler service and policies
    • Configure
    • Prepare
    • Enable
    • Probe configuration
    • Feed service
    • Settings
    • Profiling parameters
  • NMAP scan action

Module 5: Cisco ISE BYOD

  • Problem and solutions
  • Design
  • Portal selection process
  • Device portal configuration
  • ISE CA server and local certificates

Module 6: Cisco ISE Endpoint Compliance Services

  • Posture service
    • Conditions
    • Compliance module
    • Flow
    • Agents
    • Deployment and licensing
  • Client provisioning
  • Posture general settings
  • Client provisioning portal and policy

Module 7: Cisco ISE with AMP and VPN-Based Services

  • AAA – external authentication
  • Cisco ASA for VPN authentication
  • Threat centric NAC

Module 8: Cisco ISE Integrated Solutions with APIs

  • Location-based authorization
  • pxGrid framework

Module 9: Working with Network Access Devices

  • TACACS+
    • Device administration
    • Configuration
    • Guidelines
    • Best practices
  • Migrating Cisco ACS to ISE

Module 10: Cisco ISE Design (Self-Study)

  • ISE planning and Pre-deployment
  • ISE sizing and scaling practices
  • Deployment best practices
  • Web portals best practices
  • PSN HA or load sharing
  • Deploying monitoring personas
  • Network infrastructure preparation

Module 11: Configuring Thrid Party NAD Support (optional/Self-Study/Reference)

  • Third-party NAD support configuration

Labs:

  • Initial Configuration of Cisco ISE
  • Complete Cisco ISE GUI Setup
  • Integrate Cisco ISE with Active Directory
  • Integrating Cisco ISE with a second Microsoft Active Directory
  • Basic Policy Configuration
  • Configure Guest Access
  • Guest Access Operations
  • Guest Reports
  • Configuring Profiling
  • Customizing the Cisco ISE Profiling Configuration
  • ISE Profiling Reports
  • BYOD Configuration
  • Device Blacklisting
  • Compliance
  • Configuring Client Provisioning
  • Configuring Posture Policies
  • Testing and Monitoring Compliance Based Access
  • Compliance Policy Testing
  • MDM Integration with Cisco ISE
  • MDM Access and Configuration
  • Client Access with MDM
  • Using Cisco ISE for VPN Access
  • Configuring Backups and Patching
  • Configuring Administrative Access
  • Review of General Tools
  • Report Operations
Classroom Training
Modality: C

Duration 5 days

Price
  • United States: US$ 3,995
  • Cisco Learning Credits: 40 CLC
Enroll now
Online Training
Modality: L

Duration 5 days

Price
  • United States: US$ 3,995
  • Cisco Learning Credits: 40 CLC
Enroll now
 
Click City Name To Book Schedule
This is an Instructor-Led Classroom course
This green checkmark in the Upcoming Schedule below indicates that this session is Guaranteed to Run.
This is an Instructor-Led Online (ILO) course. These sessions are conducted via WebEx in a VoIP environment and require an Internet Connection and headset with microphone connected to your computer or laptop.
This is a FLEX course, which is delivered simultaneously in two modalities. Choose to attend the Instructor-Led Online (ILO) virtual session or Instructor-Led Classroom (ILT) session.
  *   This class is delivered by a partner.
United States
Feb 26-Mar 2, 2018 Overland Park 09:00 US/Eastern * Enroll
Feb 26-Mar 2, 2018 Guaranteed to Run Online Training 08:00 US/Mountain * Enroll
Mar 5-9, 2018 Boxborough 09:00 US/Eastern * Enroll
Mar 5-9, 2018 Glendale 09:00 US/Pacific * Enroll
Mar 19-23, 2018 Online Training 08:15 US/Pacific Enroll
Mar 19-23, 2018 Online Training 09:00 US/Central * Enroll
Mar 19-23, 2018 Online Training 08:00 US/Mountain * Enroll
Apr 16-20, 2018 Online Training 09:00 US/Central * Enroll
Apr 16-20, 2018 Guaranteed to Run Online Training 08:00 US/Mountain * Enroll
Apr 30-May 4, 2018 This is a FLEX event Chicago, IL 08:00 US/Central Enroll
Online Training Time zone: US/Central Enroll
Canada
Mar 19-23, 2018 Online Training 08:00 Canada/Pacific Enroll
Apr 23-27, 2018 Quebec City, QC 08:30 Canada/Eastern Course language: French * Enroll
Apr 30-May 4, 2018 Online Training 08:00 Canada/Central Enroll
Jun 25-29, 2018 Online Training 08:00 Canada/Eastern Enroll
Sep 17-21, 2018 This is a FLEX event Mississauga, Ontario 09:00 Canada/Eastern Enroll
Online Training Time zone: Canada/Eastern Enroll
Nov 5-9, 2018 Online Training 08:00 Canada/Pacific Enroll
Dec 10-14, 2018 Online Training 08:00 Canada/Eastern Enroll
Europe
Germany
Mar 19-23, 2018 Stuttgart Enroll
Apr 3-6, 2018 Düsseldorf 4 days Enroll
Apr 16-20, 2018 Hamburg Enroll
Apr 23-27, 2018 This is a FLEX event Munich Enroll
Online Training Time zone: Europe/Berlin Enroll
May 14-18, 2018 Stuttgart Enroll
May 28-Jun 1, 2018 Berlin Course language: English Enroll
Jun 4-8, 2018 Hamburg Enroll
Jun 18-22, 2018 Frankfurt Enroll
Jun 25-29, 2018 Munich Enroll
Jul 9-13, 2018 Düsseldorf Enroll
Austria
Apr 9-13, 2018 Vienna (iTLS) Enroll
Jul 16-20, 2018 Vienna (iTLS) Enroll
Nov 12-16, 2018 Vienna (iTLS) Enroll
France
Mar 12-16, 2018 Paris Enroll
Mar 19-23, 2018 Paris Enroll
May 14-18, 2018 Paris Enroll
Jun 25-29, 2018 Paris Enroll
Aug 20-24, 2018 Paris Enroll
Sep 24-28, 2018 Paris Enroll
Nov 5-9, 2018 Paris Enroll
Dec 17-21, 2018 Paris Enroll
Italy
Apr 3-6, 2018 Milan 4 days Enroll
Jul 9-13, 2018 Rome Enroll
Oct 8-12, 2018 Milan Enroll
Netherlands
Mar 19-23, 2018 Utrecht Course language: English Enroll
Apr 30-May 4, 2018 Utrecht Course language: English Enroll
Jun 4-8, 2018 Utrecht Course language: English Enroll
Oct 15-19, 2018 Utrecht Course language: English Enroll
Dec 10-14, 2018 Utrecht Course language: English Enroll
Portugal
Jul 23-27, 2018 Lisbon Enroll
Slovakia
Dec 10-14, 2018 This is a FLEX event Bratislava Enroll
Online Training Time zone: Europe/Bratislava Enroll
Slovenia
May 28-Jun 1, 2018 This is a FLEX event Ljubljana Course language: English Enroll
Online Training Time zone: Europe/Ljubljana Enroll
Spain
Apr 2-6, 2018 Madrid Enroll
Jul 2-6, 2018 Madrid Enroll
Oct 1-5, 2018 Madrid Enroll
Sweden
Apr 9-13, 2018 This is a FLEX event Stockholm Course language: English
Online Training Time zone: Europe/Stockholm
May 28-Jun 1, 2018 This is a FLEX event Stockholm Course language: English Enroll
Online Training Time zone: Europe/Stockholm Enroll
Switzerland
May 14-18, 2018 Zurich Enroll
Aug 6-10, 2018 Zurich Enroll
Oct 22-26, 2018 Zurich Enroll
Turkey
Sep 24-28, 2018 This is a FLEX event Istanbul Course language: English Enroll
Online Training Time zone: Asia/Istanbul Enroll
United Kingdom
May 21-25, 2018 This is a FLEX event London, City Enroll
Online Training Time zone: Europe/London Enroll
Jun 4-8, 2018 This is a FLEX event London, City Enroll
Online Training Time zone: Europe/London Enroll
Jul 16-20, 2018 This is a FLEX event London, City Enroll
Online Training Time zone: Europe/London Enroll
Sep 3-7, 2018 This is a FLEX event London, City Enroll
Online Training Time zone: Europe/London Enroll
Nov 26-30, 2018 This is a FLEX event London, City Enroll
Online Training Time zone: Europe/London Enroll
Latin America
Argentina
Apr 9-13, 2018 Online Training Time zone: America/Buenos_Aires Enroll
Jul 2-6, 2018 Online Training Time zone: America/Buenos_Aires Enroll
Oct 1-5, 2018 Online Training Time zone: America/Buenos_Aires Enroll
Brazil
Apr 2-6, 2018 Online Training Time zone: America/Sao_Paulo Enroll
Jul 9-13, 2018 Online Training Time zone: America/Sao_Paulo Enroll
Oct 1-5, 2018 Online Training Time zone: America/Sao_Paulo Enroll
Costa Rica
May 14-18, 2018 Online Training Time zone: America/Costa_Rica Enroll
Aug 6-10, 2018 Online Training Time zone: America/Costa_Rica Enroll
Nov 5-9, 2018 Online Training Time zone: America/Costa_Rica Enroll
Peru
Apr 2-6, 2018 Online Training Time zone: America/Lima Course language: Spanish Enroll
Jun 18-22, 2018 Online Training Time zone: America/Lima Course language: Spanish Enroll
Sep 3-7, 2018 Online Training Time zone: America/Lima Course language: Spanish Enroll
Dec 3-7, 2018 Online Training Time zone: America/Lima Course language: Spanish Enroll
Asia Pacific
Australia
Apr 16-20, 2018 This is a FLEX event Sydney Enroll
Online Training Time zone: Australia/Sydney Enroll
Jun 4-8, 2018 This is a FLEX event Melbourne Enroll
Online Training Time zone: Australia/Melbourne Enroll
Aug 6-10, 2018 This is a FLEX event Sydney Enroll
Online Training Time zone: Australia/Sydney Enroll
Oct 1-5, 2018 This is a FLEX event Melbourne Enroll
Online Training Time zone: Australia/Melbourne Enroll
Nov 26-30, 2018 This is a FLEX event Sydney Enroll
Online Training Time zone: Australia/Sydney Enroll
Middle East
United Arab Emirates
Mar 4-8, 2018 Dubai Course language: English This course is being delivered by iTLS. Enroll
Apr 1-5, 2018 Dubai Course language: English This course is being delivered by iTLS. Enroll
May 6-10, 2018 Dubai Course language: English This course is being delivered by iTLS. Enroll
Jul 1-5, 2018 Dubai Course language: English This course is being delivered by iTLS. Enroll
Sep 30-Oct 4, 2018 Dubai Course language: English This course is being delivered by iTLS. Enroll
Africa
Egypt
Mar 4-8, 2018 Cairo Course language: English Enroll
Jun 17-21, 2018 Cairo Course language: English Enroll
Sep 9-13, 2018 Cairo Course language: English Enroll
Dec 2-6, 2018 Cairo Course language: English Enroll
South Africa
May 14-18, 2018 Johannesburg Enroll