Implementing and Configuring Cisco Identity Services Engine v1.3

This course is designed to provide the knowlegde and skills required to install and implement a Cisco Identity Services Engine (ISE) v1.3 deployment. The Cisco Identity Services Engine is a next-generation identity and access control policy platform that provides a single policy plane across the entire organization combining multiple services, including authentication, authorization, and accounting (AAA), posture, profiling, device on-boarding, and guest management, into a single context-aware identity-based platform. This course covers the key components and procedures needed to install, configure, manage and troubleshoot the Cisco Identity Services Engine.

Förkunskaper

Attendees should meet the following prerequisites:

  • Knowledge of Wireless LAN controllers and Lightweight Access Points. IUWNE recommended.
  • Foundation-level network knowledge and skills necessary to install, configure, operate, and troubleshoot network devices and applications - ICND1 recommended.
  • CCNA Security certification ICND1 or CCNA and IINS.
  • Understand the concepts of 802.1X - 802.1x recommended.
  • Familiarity with Microsoft Windows and Active Directory.

 

Innehåll

Introducing the Cisco Secure Access Solution and ISE Platform Architecture

  • The Cisco Secure Access Solution
  • Cisco ISE as a Network Access Policy Engine
  • Cisco ISE Policy Security Mechanisms
  • Cisco TrustSec
  • Installing Cisco ISE
  • Cisco ISE GUI Orientation

Cisco ISE Policy Enforcement

  • 802.1X and MAB Wired and Wireless
  • Identity Management
  • Cisco ISE Policy Overview
  • Cisco ISE Policy Sets

Web Authentication

  • Web Access with Cisco ISE
  • WebAuth Configuration

Cisco ISE Guest Services

  • Cisco ISE Guest Access Components
  • Guest Access Settings
  • Sponsors and Sponsor Portals
  • Cisco ISE Guest Portal Overview
  • Cisco ISE Guest Operations and Reports

Cisco ISE Profiler

  • Introduction to Profiling
  • Profiling Configuration on Cisco ISE

Cisco ISE BYOD and MDM

  • Cisco ISE BYOD Process Overview
  • BYOD Portal Selection
  • My Devices Portal Settings
  • Certificates in BYOD Scenarios
  • Describe MDM and ISE

Cisco ISE Endpoint Compliance Services

  • Endpoint Compliance – Posture Service Overview
  • Client Provisioning in Cisco ISE
  • Mobile Client Provisioning in Cisco ISE
  • Configuring Cisco ISE for Posture Compliance

Using Cisco ISE for VPN-Based Services

  • VPN Access Overview
  • Configuring Cisco ASA v9.2+ for VPN Access
  • Using Inline Posture Node for NADs without CoA Support

Cisco TrustSec

  • Cisco TrustSec

Cisco ISE Design

  • Node Capabilities
  • Failover and High Availability

Cisco ISE Best Practices

  • Best Practices

Labs

  • Lab 1-1: Initial Configuration of Cisco ISE
  • Lab 2-1: Integrate Cisco ISE with Active Directory 
  • Lab 2-2: Integrating Cisco ISE with a second Microsoft Active Directory 
  • Lab 2-3: Basic Policy Configuration
  • Lab 2-4: Conversion to Policy Sets
  • Lab 4-1: Configure Guest Access
  • Lab 4-2: Guest Access Operations
  • Lab 4-3: Guest Reports
  • Lab 5-1: Configuring Profiling
  • Lab 5-2: Customizing the Cisco ISE Profiling Configuration
  • Lab 5-3: ISE Profiling Reports
  • Lab 6-1: BYOD Configuration
  • Lab 6-2: Device Blacklisting
  • Lab 7-1: Compliance
  • Lab 7-2: Configuring Client Provisioning
  • Lab 7-3: Configuring Posture Policies
  • Lab 7-4: Testing and Monitoring Compliance Based Access
  • Lab 7-5: Compliance Policy Testing
  • Lab 7-6: MDM Integration with Cisco ISE
  • Lab 7-7: MDM Access and Configuration
  • Lab 7-8: Client Access with MDM
  • Lab 8-1: Using Cisco ISE for VPN Access

After completing this course you should be able to:

  • Understand the concepts of Policy Enforcement in a Cisco network
  • Understand the concepts of designing an implementation along with Cisco recognized best practices
  • Install ISE v1.3
  • Configure Cisco ISE v 1.3 for Guest Access, BYOD and MDM and Cisco ISE Compliance and Posture

Boka kursen

Boka din plats redan idag.

Om kursen

Pris: 30 000,00 kr

exklusive moms

Längd 5 dagar
Kurskod SISE
Boka kursen

Välj ort och kursstart

sg Startgaranti innebär att kursen startar oavsett antal deltagare

lc LiveClass innebär att kursen hålls som en lärarledd interaktiv onlineutbildning.

17 oktober

12 december

Kunduppgifter