Implementing Cisco Secure Access Solutions

Objectives:

• Understand Cisco Identity Services Engine architecture and access control capabilities
• Understand 802.1X architecture, implementation and operation
• Understand commonly implemented Extensible Authentication Protocols (EAP)
• Implement Public-Key Infrastructure with ISE
• Understand the implement Internal and External authentication databases
• Implement MAC Authentication Bypass
• Implement identity based authorization policies
• Understand Cisco TrustSec features
• Implement Web Authentication and Guest Access
• Implement ISE Posture service
• Implement ISE Profiling
• Understand Bring Your Own Device (BYOD) with ISE
• Troubleshoot ISE

Course Outline:

Module 1: Threat Mitigation through Identity Services

Identity Services
802.1X and EAP
Configure 802.1X Components
Lab 1-1: Bootstrap Identity System

Module 2: ISE Fundamentals

Describe Cisco ISE Features and configure the fundamentals
Cisco ISE with PKI
Lab 2-1: Enroll Cisco ISE with PKI
Cisco ISE Authentication
Lab 2-2: Implement MAB and Internal Authentication with ISE
Cisco ISE with External Authentication
Lab 2-3: Implementing External Authentication

Module 3: Advance Access Control

Certificate Based User Authentication
Lab 3-1: Implement EAP-TLS
Authorization
Lab 3-2: Implement Authorization
Cisco TrustSec

Module 4: Web Authentication and Guest Access

Web Authentication
Lab 4-1: Implement Web Authentication
Guest Access Services
Lab 4-2: Implement Guest Access

Module 5: Endpoint

Posture
Lab: 5-1: Implement Posture
Profiler
Lab 5-2: Implement Profiling
BYOD

Module 6: Troubleshooting Network Access Control

Troubleshooting ISE
Lab 6-1: Troubleshooting ISE

Please note - this course replaces the now retired CSECURE, from the old CCNP Security Certification