Implementing and Configuring Cisco Identity Services Engine (SISE v3.0)

Upon completion of this course, you will be able to:

• Describe Cisco ISE deployments, including core deployment components and how they interact to create a cohesive security architecture. Describe the advantages of such a deployment and how each Cisco ISE capability contributes to these advantages.

• Describe concepts and configure components related to 802.1X and MAC Authentication Bypass (MAB) authentication, identity management, and certificate services.

• Describe how Cisco ISE policy sets are used to implement authentication and authorization, and how to leverage this capability to meet the needs of your organization.

• Describe third-party network access devices (NADs), Cisco TrustSec®, and Easy Connect.

• Describe and configure web authentication, processes, operation, and guest services, including guest access components and various guest access scenarios.

• Describe and configure Cisco ISE profiling services, and understand how to monitor these services to enhance your situational awareness about network-connected endpoints. Describe best practices for deploying this profiler service in your specific environment.

• Describe BYOD challenges, solutions, processes, and portals. Configure a BYOD solution, and describe the relationship between BYOD processes and their related configuration components. Describe and configure various certificates related to a BYOD solution.

• Describe the value of the My Devices portal and how to configure this portal.

• Describe endpoint compliance, compliance components, posture agents, posture deployment and licensing, and the posture service in Cisco ISE.

• Describe and configure TACACS+ device administration using Cisco ISE, including command sets, profiles, and policy sets. Understand the role of TACACS+ within the authentication, authentication, and accounting (AAA) framework and the differences between the RADIUS and TACACS+ protocols.

• Migrate TACACS+ functionality from Cisco Secure Access Control System (ACS) to Cisco ISE, using a migration tool.

It is recommended, but not required, to have the following skills and knowledge before attending this course:

• Familiarity with the Cisco IOS® Software command-line interface (CLI)

• Familiarity with Cisco AnyConnect® Secure Mobility Client

• Familiarity with Microsoft Windows operating systems

• Familiarity with 802.1X

• Network Security Engineers

• ISE Administrators

• Wireless Network Security Engineers

• Cisco Integrators and Partners

• Section 1: Introducing Cisco ISE Architecture and Deployment
• Section 2: Cisco ISE Policy Enforcement
• Section 3: Web Auth and Guest Services
• Section 4: Cisco ISE Profiler
• Section 5: Cisco ISE BYOD
• Section 6: Cisco ISE Endpoint Compliance Services
• Section 7: Working with Network Access Devices

Lab Outline

• Discovery 1: Access the SISE Lab and Install ISE 3.x
• Discovery 2: Configure Initial Cisco ISE Setup, GUI Familiarization, and System Certificate Usage
• Discovery 3: Integrate Cisco ISE with Active Directory
• Discovery 4: Configure Cisco ISE Policy
• Discovery 5: Configure Guest Access
• Discovery 6: Configure Guest Access Operations
• Discovery 7: Create Guest Reports
• Discovery 8: Configure Profiling
• Discovery 9: Customize the Cisco ISE Profiling Configuration
• Discovery 10: Create Cisco ISE Profiling Reports
• Discovery 11: Configure BYOD
• Discovery 12: Blacklisting a Device
• Discovery 13: Configure Cisco ISE Compliance Services
• Discovery 14: Configure Client Provisioning
• Discovery 15: Configure Posture Policies
• Discovery 16: Test and Monitor Compliance Based Access
• Discovery 17: Test Compliance Policy
• Discovery 18: Configure Cisco ISE for Basic Device Administration
• Discovery 19: Configure TACACS+ Command Authorization