HBFITES

Cisco Identity Services Engine (ISE) is a next-generation identity and access control policy platform that enables enterprises to enforce compliance, enhance infrastructure security, and streamline their service operations. ISE includes the functionality of Cisco Access Control System (ACS) as well as the Network Admissions Control (NAC) Appliance, providing a single solution for AAA services as well as profiling services, posture services and more.

Who should attend

The primary audience for this course is as follows:

    Cisco Channel Partner SEs and FEs that are seeking to meet the education requirements to attain ATP authorization to sell Cisco ISE.

The secondary audience for this course is as follows:

    Partner security architects, design engineers, and others seeking hands-on experience with Cisco ISE. Note that Cisco customers are best served by attending our ISE Essentials (ISEE) or Architecting, Deploying and Managing ISE in the Enterprise (ADISE) courses.

Prerequisites

The prerequisite for Cisco Channel Partners to attend the Implementing Cisco Identity Services Engine Secure Solutions (ISE) v1.0 course is the Introduction to 802.1X Operations for Cisco Security Professionals

This section lists the skills and knowledge that learners must possess to benefit fully from the course. This section includes recommended Cisco learning offerings that the learners may complete to benefit fully from this course, including the following:

Required:

    CCNA certification or equivalent level of experience with the configuration of Cisco routers and switches.
    Introduction to 802.1X Operations for Cisco Security Professionals

Recommended:

    CCNP certification or equivalent level of experience.
    CCSP, CCNP Security certification or equivalent level of experience.
    Base level of knowledge and understanding of the NAC appliance and Cisco ACS server version 5.X.

Course Objectives

Upon completing this course, the learner will be able to meet these overall objectives:

    Describe the TrustSec 2.0 solution architecture and deployment methodologies using the ISE platform.
    Configure the ISE platform in a network that includes Microsoft Active Directory.
    Configure the Cisco ISE software for wired and wireless 802.1X.
    Deploy firewall-based VPN services using the Cisco ASA and Inline Posture.
    Configure the ISE for classification and policy enforcement.
    Deploy ISE-based profiling, posture, and guest services.
    Troubleshoot user authentication and policy enforcement problems based on configuration error or network issue.
    Create a Low-level design for the ISE platform deployment methodology, scaling requirements, and platform resiliency

Course Content

Implementing Cisco Identity Service Engine Secure Solutions (ISE) is a course designed to provide students with hands-on lab configuration of Cisco’s Identity Services Engine running software version 1.0. The ISE platform takes the place of the Cisco ACS and NAC servers typically used in today’s identity-based networks. The students will implement 802.1X-based network services using Cisco Catalyst and Nexus switches and Cisco wireless products. The course also addresses solution design, sizing, resiliency, and platform troubleshooting.