DUNS #: 07-985-4198 | Cage Code: 7F5V0 | NAICS Codes: 611310, 611420

Implementing & Configuring Cisco Identity Services Engine

5 Days

Price: $3795

Course Schedule

Overview

Implementing Cisco Identity Service Engine Secure Solutions (ISE) is designed to provide you with hands-on lab configuration of Cisco’s Identity Services Engine running software version 1.0. The ISE platform takes the place of the Cisco ACS and NAC servers typically used in today’s identity-based networks. You will implement 802.1X-based network services using Cisco Catalyst and Nexus switches and Cisco wireless products. The course also addresses solution design, sizing, resiliency, and platform troubleshooting.


Objectives

  • Describe the TrustSec 2.0 solution architecture and deployment methodologies using the ISE platform
  • Configure the ISE platform in a network that includes Microsoft Active Directory
  • Configure the Cisco ISE software for wired and wireless 802.1X
  • Deploy firewall-based VPN services using the Cisco ASA and Inline Posture
  • Configure the ISE for classification and policy enforcement
  • Deploy ISE-based profiling, posture, and guest services
  • Troubleshoot user authentication and policy enforcement problems based on configuration error or network issue
  • Create a Low-level design for the ISE platform deployment methodology, scaling requirements, and platform resiliency

Audience

This course is primarily intended for:

  • Cisco Channel Partner SEs and FEs that are seeking to meet the education requirements to attain ATP authorization to sell Cisco ISE

Others who would find this course useful include:

  • Partner security architects, design engineers, and others seeking hands-on experience with Cisco ISE. Note that Cisco customers are best served by attending our ISE Essentials (ISEE) or Architecting, Deploying and Managing ISE in the Enterprise (ADISE) courses

Prerequisites

The prerequisite for Cisco Channel Partners to attend the Implementing Cisco Identity Services Engine Secure Solutions (ISE) v1.0 course is the Introduction to 802.1X Operations for Cisco Security Professionals

Required:

  • CCNA certification or equivalent level of experience with the configuration of Cisco routers and switches.
  • Introduction to 802.1X Operations for Cisco Security Professionals

Recommended:

  • CNP certification or equivalent level of experience.
  • CCSP, CCNP Security certification or equivalent level of experience.
  • Base level of knowledge and understanding of the NAC appliance and Cisco ACS server version 5.X.

Outline

Module 1: Introducing the TrustSec 2.0 Solution and ISE Platform Architecture

  • Lesson 1: Introducing the TrustSec 2.0 Solution and ISE Platform Architecture
  • LAB Topology and Access

Module 2: Deploying the Cisco Identity Services Engine

  • Lesson 1: Installing the ISE Software
  • LAB 2: Completing the Initial Software Configuration
  • Lesson 2: Integrating the ISE into Microsoft Active Directory
  • LAB 3: Integrating the ISE into Microsoft Active Directory
  • Lesson 3: Configuring the ISE for High Availability

Module 3: Implementing Classification and Policy Enforcement

  • Lesson 1: Using the ISE for Policy Enforcement
  • Lesson 2: Configuring the ISE for MAC Address Bypass (MAB)
  • LAB 4: Configuring the ISE for MAB
  • Lesson 3: Configuring the ISE for Wired and Wireless 802.1X Authentication
  • LAB 5: Configuring Cisco ISE for Wired 802.1X Authentication
  • LAB 6: Configuring Cisco ISE for Wireless 802.1X Authentication
  • Lesson 4: Deploying VPN-based Services Using the Cisco ASA and Inline Posture
  • Lesson 5: Configuring Web Authentication Using the ISE
  • LAB 7: Configuring Web Authentication and Policy Enforcement

Module 4: Configuring Profiling, Posture, and Guest Services

  • Lesson 1: Introducing ISE Guest Services
  • LAB 8: Creating Guest Users and Guest User Policies in the Sponsor Port
  • Lesson 2: Introducing ISE Profiling Services
  • LAB 9: Configuring the ISE for Profiling Services
  • Lesson 3: Introducing ISE Posture Services
  • LAB 10: Configuring the ISE for Posture Services

Module 5: Creating a Low-Level Design for the ISE

  • Lesson 1: Designing the TrustSec 2.0 Solution Architecture for the ISE Appliance
  • Appendix A: Selecting Trustec 2.0 Infrastructure Hardware and the ISE Appliance
  • Appendix B: Introducing TrustSec Fundamentals