Cisco Security

Required:

• Cisco CCNA® certification or equivalent level of experience with the configuration of Cisco routers and switches
• Introduction to 802.1X Operations for Cisco Security Professionals Version 1.0

Recommended:

• Cisco CCNP® certification or equivalent level of experience
• Cisco CCSP® certification or equivalent level of experience
• Base level of knowledge and understanding of the Cisco NAC Appliance and Cisco Secure ACS server version 5.X

Implementing Cisco Identity Services Engine Secure Solutions (ISE) is a course that is designed to provide students with hands-on lab configuration of the Cisco Identity Services Engine (ISE) running software version 1.0. The Cisco ISE platform takes the place of the Cisco Secure Access Control System (ACS) and Network Admission Control (NAC) servers that are typically used in identity-based networks. The students will implement IEEE 802.1X-based network services using Cisco Catalyst and Nexus switches and Cisco wireless products. The course also addresses solution design, sizing, resiliency, and platform troubleshooting

Upon completing this course, the learner will be able to meet these overall objectives:

• Describe the Cisco TrustSec 2.0 solution architecture and deployment methodologies using the Cisco ISE platform
• Configure the Cisco ISE platform in a network that includes Microsoft Active Directory
• Configure the Cisco ISE software for wired and wireless 802.1X
• Deploy firewall-based VPN services using the Cisco ASA 5500 Series Adaptive Security Appliances and inline posture
• Configure the Cisco ISE for classification and policy enforcement
• Deploy the Cisco ISE Profiler Service, Posture Service, and Guest Service
• Troubleshoot user authentication and policy enforcement problems that are based on configuration errors or network issues
• Create a low-level design for the Cisco ISE platform deployment methodology, scaling requirements, and platform resiliency

The course outline is as follows:

• Introducing the Cisco TrustSec 2.0 Solution and ISE Platform Architecture
• Installing the Cisco ISE Software
• Integrating Cisco ISE into Microsoft Active Directory
• Introducing High Availability
• Using Cisco ISE for Policy Enforcement
• Configuring Cisco ISE for MAB
• Configuring Cisco ISE for Wired and Wireless 802.1X Authentication
• Deploying VPN-based Services Using the Cisco ASA Adaptive Security Appliance and Inline Posture
• Configuring Web Authentication Using Cisco ISE
• Introducing the Cisco ISE Guest Service
• Introducing the Cisco ISE Profiler Service
• Introducing the Cisco ISE Posture Service
• Designing the Cisco TrustSec 2.0 Solution Architecture for the ISE Appliance

The lab outline is as follows:

• Lab 1: Lab Topology and Access
• Lab 2: Completing the Initial Setup Configuration
• Lab 3: Integrating Cisco ISE into Microsoft Active Directory
• Lab 4: Configuring Cisco ISE for MAB
• Lab 5: Configuring Cisco ISE for Wired 802.1X Authentication
• Lab 6: Configuring Cisco ISE for Wireless 802.1X Authentication
• Lab 7: Configuring Web Authentication and Policy Enforcement
• Lab 8: Creating Guest Users and Guest User Policies in the Sponsor Portal
• Lab 9: Configuring Cisco ISE for the Profiler Service
• Lab 10: Configuring Cisco ISE for the Posture Service
• Lab 11: Creating a Low-Level Design for Cisco ISE (Case Study)