Cisco ISE


Cisco ISE

This course has been designed to provide students with an understanding of the new features available in ISE. The intention is not to provide students with an entire overview of ISE (please see SISE if desiring a comprehensive ISE course), but to provide a delta ISE 2.0. Students will get hands-on experience with labs surrounding Multi-AD integration, BYOD, Posture integration using the Cisco AnyConnect Unified Agent, Guest Access Management, Enhanced Trustsec etc.


  • Knowledge of CCNA Security IINS

Course Objectives

  • Understand the key components of ISE
  • Understand the benefits of ISE
  • Understand the benefits of ISE
  • Understand the benefits of ISE
  • Understand and explain licencing
  • Explain the use of network analysis policies and the role of preprocessor technology in processing network
  • traffic for NGIPS inspection
  • Describe and demonstrate the detailed analysis techniques and reporting features provided by the Cisco
  • Firepower Management Center
  • Describe major Cisco Firepower Management Center system administration and user account management
  • features



Course Curriculum

Section 1: Designing and Implementing ISE for a multi Active Directory environment

  • Integrate Cisco ISE with AD
  • Integrate Cisco ISE with second AD
  • Easy wired access for integrating ISE and AD in a non 802.1X environment

Section 2: Implementing BYOD using Enhanced Onboarding

  • BYOD Process Overview
  • BYOD Portal Selection
  • My Devices Portal
  • BYOD with Certificates or Local ISE CA server
  • MDM Integrations

Section 3: Implementing ISE 2.0 Enhanced Guest Services

  • Configure Guest Access
  • Sponsor Configuration
  • Guest Reports

Section 4: PXGRID

  • High Level Discussion
  • Integration with StealthWatch

Section 5: ISE Enhanced Licensing

  • Cisco ISE and Positioning
  • Cisco Sales Motions
  • The Market and ATP Program (sunsetting dates)
  • Licensing Updates for ISE

Section 6: Enhancing TrustSec Capabilities

  • New automated TrustSec integration with a new interface

Section 7: TACACS Integration

  • TACACS+ Device Administration Work Center
  • Authenticating and Authorizing Device Administration

Section 8: Additional Features in ISE 1.4 and 2.0

  • IPv6 Support
  • Location Awareness Integration
  • Operational Enhancements
  • AnyConnect 4.2 Enhancements (Certificate Pinning, TnD, Network Visibility Module)