Cisco Identity Services Engine Essentials
Book Now - 1 Delivery Method Available:
Classroom Virtual Classroom Private Group - Virtual Self-Paced OnlineOverview
In this course, you will learn about the Cisco Identity Services Engine (ISE) a next-generation identity and access control policy platform that provides a single policy plane across the entire organization combining multiple services, including authentication, authorization, and accounting (AAA) using 802.1x and MAB. The training provides learners with the knowledge and skills to implement 802.1X and MAB for wired and wireless endpoints. The class focuses on configuring Network Access Devices (IOS switches, and Wireless Lan Controllers) with commands necessary for ISE integration. The class also covers configuration of endpoints to use the native Microsoft supplicant with PEAP and EAP-TLS, as well as the Cisco NAM supplicant with EAP-FAST. Time is taken to explore Microsoft Active Directory group policy for endpoint configuration, and to cover integration of an enterprise CA for certificate based authentication.
This course is an intensive hands-on experience. With enhanced hands-on labs, you will setup and patch an ISE node, and use and enterprise CA to configure certificate services for use in a distributed deployment. You will integrate ISE with Active Directory and configure Group Policy to automatically enroll endpoints with an enterprise CA for TLS based authentication. You will configure and test AAA and 802.1X on an IOS switch using classical commands to integrate with ISE. You will migrate and test an IOS switch configuration to use the new-mode IBNS 2.0 Cisco Common Classification Policy Language (C3PL). You will configure and test a Cisco Wireless LAN Controller (WLC) with advanced ISE features. The class also covers the new ISE 2.3 conditions studio and its use in Policy Sets for Authentication/Authorization rules, Profiling of endpoints on the network, and Device Administration using TACACS+.
Objectives
After completing this course you should be able to:
- Implement Best Practices for Designing and Deploying a Distributed Cisco ISE Solution
- Install certificates into ISE using a Windows 2012 Certificate Authority (CA)
- Configure the Local and Active Directory Based Identity Store and use of Identity Source Sequences
- Implement Best Practices for configuring a Cisco IOS Switch for use with ISE
- Migrate an existing Cisco IOS Switch configuration to New-Mode Cisco Common Classification Policy Language (C3PL)
- Implement Best Practices for configuring a Cisco Wireless LAN Controller (WLC) for use with ISE
- Configure Policy Sets and Network Access Devices in ISE
- Implement & Test 802.1X in ISE for wired PEAP, EAP-FAST & EAP-TLS Supplicants
- Implement & Test 802.1X in ISE for wireless EAP-FAST & EAP-TLS Supplicants
- Implement & Test MAC Authentication Bypass (MAB) in ISE for wired and wireless endpoints
- Turn on Endpoint Profiling and use it to identify popular endpoints such as Windows and Apple iOS devices.
- Implement TACACS+ for Switch and WLC Device Administration
Target Audience
Consulting systems engineers; Technical solutions architects; Integrators who install and implement the Cisco ISE version 2.3; End users (Cisco customers) desiring the knowledge to install, configure, and deploy Cisco ISE 2.3. Cisco channel partners and field engineers who need to meet the educational requirements to attain Authorized Technology Partner (ATP) authorization to sell and support the ISE product.
Training Partners
We work with the following best of breed training partners using our bulk buying power to bring you a wider range of dates, locations and prices.
Modules
Prerequisites
Attendees should meet the following prerequisites:
- CCNA Security or equivalent level of experience with Cisco devices (ICND1 +IINS)
- Foundation-level wireless knowledge and skills
- Familiarity with Microsoft Windows and Microsoft Active Directory
- Familiarity with 802.1X
- Familiarity with Cisco ASA
- Familiarity with Cisco AnyConnect Secure Mobility Client
Scheduled Dates
Please select from the dates below to make an enquiry or booking.
Pricing
Different pricing structures are available including special offers. These include early bird, late availability, multi-place, corporate volume and self-funding rates. Please arrange a discussion with a training advisor to discover your most cost effective option.
| Code | Location | Duration | Price | Sep | Oct | Nov | Dec | Jan | Feb |
|---|---|---|---|---|---|---|---|---|---|
| Later scheduled dates may be available for this course. | |||||||||