1

• Exception policies and policy sets• Global vs local exception processing• Third-party NAD support• Cisco TrustSec• Easy connect - Overview - Modes and flows - Configuration

| Module 3 | Web Auth & Guest Services

• Web authentication overview• Guest access services overview• Guest access settings• ISE sponsor components and configuration

| Module 4 | Cisco ISE Profiler

• Profiler service and policies - Configure - Prepare - Enable - Probe configuration - Feed service - Settings - Profiling parameters• NMAP scan action

| Module 5 | Cisco ISE BYOD

• Problem and solutions• Design• Portal selection process• Device portal configuration• ISE CA server and local certificates

COURSE OUTLINE

| Module 1 | Introducing Cisco ISE Architecture and Deployment

.• Security challenges• Cisco ISE solutions Use Cases - Guest use - BYOD - Profiling - Compliance - Security group access• Secure Access Control• ISE function• ISE deployment components - Admin node - Policy service node - Monitoring node - pxGrid Services - Policy synchronization - Deployment options• Context visibility - Benefits - Wizard - Streamline wizard

| Module 2 | Cisco ISE Policy Enforcement

• IEEE 802.1X primeer• MAC authentication bypass• 802.1X and MAB• Identity sources• Multi-AD overview and configuration• Lightweight directory access protocol• RADIUS• SAMLv2• Identity source sequence• Certification authority services• Authentication and authorization process

IMPLEMENTING AND CONFIGURING CISCO IDENTITY SERVICES ENGINE (SISE) V2.1

5 Days Course

2

| Module 11 | Configuring Thrid Party NAD Support (optional/Self-Study/Reference)

• Third-party NAD support configuration

COURSE OUTLINE

Module 6 | Cisco ISE Endpoint Compliance Services

• Posture service - Conditions - Compliance module - Flow - Agents - Deployment and licensing - Client provisioning - Posture general settings• Client provisioning portal and policy

| Module 7 | Cisco ISE with AMP and VPN-Based Services

• AAA – external authentication• Cisco ASA for VPN authentication• Threat centric NAC

| Module 8 | Cisco ISE Integrated Solutions with APIs

• Location-based authorization• pxGrid framework

Module 9 | Working with Network Access Devices

• TACACS+ - Device administration - Configuration - Guidelines - Best practices• Migrating Cisco ACS to ISE

| Module 10 | Cisco ISE Design (Self-Study)

• ISE planning and Pre-deployment• ISE sizing and scaling practices• Deployment best practices• Web portals best practices• PSN HA or load sharing• Deploying monitoring personas• Network infrastructure preparation