Cisco ISE

Image

Cisco ISE

This course has been designed to provide students with an understanding of the new features available in ISE. The intention is not to provide students with an entire overview of ISE (please see SISE if desiring a comprehensive ISE course), but to provide a delta ISE 2.0. Students will get hands-on experience with labs surrounding Multi-AD integration, BYOD, Posture integration using the Cisco AnyConnect Unified Agent, Guest Access Management, Enhanced Trustsec etc.

Prerequisites

  • Knowledge of CCNA Security IINS

Course Objectives

  • Understand the key components of ISE
  • Understand the benefits of ISE
  • Understand the benefits of ISE
  • Understand the benefits of ISE
  • Understand and explain licencing
  • Explain the use of network analysis policies and the role of preprocessor technology in processing network
  • traffic for NGIPS inspection
  • Describe and demonstrate the detailed analysis techniques and reporting features provided by the Cisco
  • Firepower Management Center
  • Describe major Cisco Firepower Management Center system administration and user account management
  • features

 


 

Course Curriculum


Section 1: Designing and Implementing ISE for a multi Active Directory environment

  • Integrate Cisco ISE with AD
  • Integrate Cisco ISE with second AD
  • Easy wired access for integrating ISE and AD in a non 802.1X environment


Section 2: Implementing BYOD using Enhanced Onboarding

  • BYOD Process Overview
  • BYOD Portal Selection
  • My Devices Portal
  • BYOD with Certificates or Local ISE CA server
  • MDM Integrations


Section 3: Implementing ISE 2.0 Enhanced Guest Services

  • Configure Guest Access
  • Sponsor Configuration
  • Guest Reports


Section 4: PXGRID

  • High Level Discussion
  • Integration with StealthWatch


Section 5: ISE Enhanced Licensing

  • Cisco ISE and Positioning
  • Cisco Sales Motions
  • The Market and ATP Program (sunsetting dates)
  • Licensing Updates for ISE


Section 6: Enhancing TrustSec Capabilities

  • New automated TrustSec integration with a new interface


Section 7: TACACS Integration

  • TACACS+ Device Administration Work Center
  • Authenticating and Authorizing Device Administration


Section 8: Additional Features in ISE 1.4 and 2.0

  • IPv6 Support
  • Location Awareness Integration
  • Operational Enhancements
  • AnyConnect 4.2 Enhancements (Certificate Pinning, TnD, Network Visibility Module)