Implementing Cisco Identity Services Engine Secure Solutions

Course details

Implementing Cisco Identity Services Engine Secure Solutions (ISE) is a course that is designed to provide students with hands-on lab configuration of the Cisco Identity Services Engine (ISE) running software version 1.0. The Cisco ISE platform takes the place of the Cisco Secure Access Control System (ACS) and Network Admission Control (NAC) servers that are typically used in identity-based networks. The students will implement IEEE 802.1X-based network services using Cisco Catalyst and Nexus switches and Cisco wireless products. The course also addresses solution design, sizing, resiliency, and platform troubleshooting

Target Audience

The primary audience for this course is as follows:

• Cisco Channel Partner systems and field engineers that are seeking to meet the education requirements to attain Authorized Technology Provider (ATP) authorization to sell the Cisco ISE.

The secondary audience for this course is as follows:

• Security architects, design engineers, and others seeking hands-on experience with the Cisco ISE.

Objectives

Upon completing this course, the learner will be able to meet these overall objectives:

• Describe the Cisco TrustSec 2.0 solution architecture and deployment methodologies using the Cisco ISE platform
• Configure the Cisco ISE platform in a network that includes Microsoft Active Directory
• Configure the Cisco ISE software for wired and wireless 802.1X
• Deploy firewall-based VPN services using the Cisco ASA 5500 Series Adaptive Security Appliances and inline posture
• Configure the Cisco ISE for classification and policy enforcement
• Deploy the Cisco ISE Profiler Service, Posture Service, and Guest Service
• Troubleshoot user authentication and policy enforcement problems that are based on configuration errors or network issues
• Create a low-level design for the Cisco ISE platform deployment methodology, scaling requirements, and platform resiliency

Course Outline

The course outline is as follows:

• Introducing the Cisco TrustSec 2.0 Solution and ISE Platform Architecture
• Installing the Cisco ISE Software
• Integrating Cisco ISE into Microsoft Active Directory
• Introducing High Availability
• Using Cisco ISE for Policy Enforcement
• Configuring Cisco ISE for MAB
• Configuring Cisco ISE for Wired and Wireless 802.1X Authentication
• Deploying VPN-based Services Using the Cisco ASA Adaptive Security Appliance and Inline Posture
• Configuring Web Authentication Using Cisco ISE
• Introducing the Cisco ISE Guest Service
• Introducing the Cisco ISE Profiler Service
• Introducing the Cisco ISE Posture Service
• Designing the Cisco TrustSec 2.0 Solution Architecture for the ISE Appliance

The lab outline is as follows:

• Lab 1: Lab Topology and Access
• Lab 2: Completing the Initial Setup Configuration
• Lab 3: Integrating Cisco ISE into Microsoft Active Directory
• Lab 4: Configuring Cisco ISE for MAB
• Lab 5: Configuring Cisco ISE for Wired 802.1X Authentication
• Lab 6: Configuring Cisco ISE for Wireless 802.1X Authentication
• Lab 7: Configuring Web Authentication and Policy Enforcement
• Lab 8: Creating Guest Users and Guest User Policies in the Sponsor Portal
• Lab 9: Configuring Cisco ISE for the Profiler Service
• Lab 10: Configuring Cisco ISE for the Posture Service
• Lab 11: Creating a Low-Level Design for Cisco ISE (Case Study)