Implementing and Configuring Cisco Identity Services Engine (SISE v3.0) Training

Level: Intermediate

The Implementing and Configuring Cisco Identity Services Engine (SISE) v3.0 course shows you how to deploy and use Cisco® Identity Services Engine (ISE) v2.4, an identity and access control policy platform that simplifies the delivery of consistent, highly secure access control across wired, wireless, and VPN connections. This hands-on course provides you with the knowledge and skills to implement and use Cisco ISE, including policy enforcement, profiling services, web authentication and guest access services, BYOD, endpoint compliance services, and TACACS+ device administration. Through expert instruction and hands-on practise, you will learn how to use Cisco ISE to gain visibility into what is happening in your network, streamline security policy management, and contribute to operational efficiency.

Key Features of this Cisco SISE Training:

  • Cisco Authorised course content
  • Authorised Cisco CCSI Instructor
  • Eligible for Cisco Learning Credit (CLC) redemption
  • Attend in-class, online or bring the course to your facility
  • Expansive course catalogue to go deep into Cisco or broaden you skills beyond

You Will Learn How To:

  • Describe Cisco ISE deployments, including core deployment components and how they interact to create a cohesive security architecture.
  • Describe the advantages of such a deployment and how each Cisco ISE capability contributes to these advantages.
  • Describe concepts and configure components related to 802.1X and MAC Authentication Bypass (MAB) authentication, identity management, and certificate services.
  • Describe how Cisco ISE policy sets are used to implement authentication and authorisation, and how to leverage this capability to meet the needs of your organisation.
  • Describe third-party network access devices (NADs), Cisco TrustSec®, and Easy Connect.
  • Describe and configure web authentication, processes, operation, and guest services, including guest access components and various guest access scenarios.
  • Describe and configure Cisco ISE profiling services, and understand how to monitor these services to enhance your situational awareness about network-connected endpoints.
  • Describe best practises for deploying this profiler service in your specific environment.
  • Describe BYOD challenges, solutions, processes, and portals.
  • Configure a BYOD solution, and describe the relationship between BYOD processes and their related configuration components.
  • Describe and configure various certificates related to a BYOD solution.
  • Describe the value of the My Devices portal and how to configure this portal.
  • Describe endpoint compliance, compliance components, posture agents, posture deployment and licencing, and the posture service in Cisco ISE.
  • Describe and configure TACACS+ device administration using Cisco ISE, including command sets, profiles, and policy sets.
  • Understand the role of TACACS+ within the authentication, authentication, and accounting (AAA) framework and the differences between the RADIUS and TACACS+ protocols.
  • Migrate TACACS+ functionality from Cisco Secure Access Control System (ACS) to Cisco ISE, using a migration tool.

Choose the Training Solution That Best Fits Your Individual Needs or Organisational Goals

LIVE, INSTRUCTOR-LED

In Class & Live, Online Training

  • 5-day instructor-led training course
  • Authorised Cisco Training Provider
  • Providing over 20 years of Cisco Training
  • Pay later by invoice -OR- at the time of checkout by credit card
  • Attend Virtually from your Home or Office
View Course Details & Schedule

Standard £2995

RESERVE SEAT

PRODUCT #2830

TRAINING AT YOUR SITE

Team Training

  • Bring this or any training to your organisation
  • Full - scale program development
  • Delivered when, where, and how you want it
  • Blended learning models
  • Tailored content
  • Expert team coaching
View Details ›

Customize Your Team Training Experience

CONTACT US

Save More on Training with Learning Tree Training Vouchers!

Our flexible, easy-to-redeem training vouchers are available to any employee within your organisation. For details, please call 0800 282 353 or chat live.

In Class & Live, Online Training

Note: This course runs for 5 Days *

*Events with the Partial Day Event clock icon run longer than normal but provide the convenience of half-day sessions.

  • 9 - 13 Nov 9:30 AM - 5:00 PM GMT Online (WebEx) Online (WebEx) Reserve Your Seat

  • 9 - 13 Nov 9:30 AM - 5:00 PM GMT Online (WebEx) Online (WebEx) Reserve Your Seat

  • 14 - 18 Dec 9:30 AM - 5:00 PM GMT Online (WebEx) Online (WebEx) Reserve Your Seat

Guaranteed to Run

When you see the "Guaranteed to Run" icon next to a course event, you can rest assured that your course event — date, time — will run. Guaranteed.

Partial Day Event

Learning Tree offers a flexible schedule program. If you cannot attend full day sessions, this option consists of four-hour sessions per day instead of the full-day session.

Important Cisco SISE Course Information

  • Prerequisites

    It is recommended, but not required, to have the following skills and knowledge before attending this course:

    • Familiarity with the Cisco IOS® Software command-line interface (CLI)
    • Familiarity with Cisco AnyConnect® Secure Mobility Client
    • Familiarity with Microsoft Windows operating systems
    • Familiarity with 802.1X
  • Who Should Attend this Course

    • Network security engineers
    • ISE administrators
    • Wireless network security engineers
    • Cisco integrators and partners
  • Course Benefits

    • Provide secure business and context-based access based on policies
    • Centrally configure and manage profiler, posture, guest, authentication, and
    • authorisation services in a single web-based GUI console
    • Provide a streamlined experience for implementing and customising guest network access
    • Gain leading-edge career skills for high-demand job roles and responsibilities focused on enterprise security
  • Redeem Your Cisco Learning Credits (CLCs)

  • Certifications

    • 300-715 SISE - CCNP Security, Cisco Certified Specialist - Security Identity Management Implementation
    • This course is part of the following Certifications: CCNP Security Track

Cisco SISE Course Outline

  •  Introducing Cisco ISE Architecture and Deployment

    • Using Cisco ISE as a Network Access Policy Engine
    • Cisco ISE Use Cases
    • Describing Cisco ISE Functions
    • Cisco ISE Deployment Models
    • Context Visibility
  • Cisco ISE Policy Enforcement

    • Using 802.1X for Wired and Wireless Access
    • Using MAC Authentication Bypass for Wired and Wireless Access
    • Introducing Identity Management
    • Configuring Certificate Services
    • Introducing Cisco ISE Policy
    • Implementing Third-Party Network Access Device Support
    • Introducing Cisco TrustSec
    • Cisco TrustSec Configuration
    • Easy Connect
  • Web Authentication and Guest Services

    • Introducing Web Access with Cisco ISE
    • Introducing Guest Access Components
    • Configuring Guest Access Settings
    • Configuring Sponsor and Guest Portals
  • Cisco ISE Profiler

    • Introducing Cisco ISE Profiler
    • Profiling Deployment and Best Practises
  • Cisco ISE BYOD

    • Introducing the Cisco ISE BYOD Process
    • Describing BYOD Flow
    • Configuring the My Devices Portal
    • Configuring Certificates in BYOD Scenarios
  • Cisco ISE Endpoint Compliance Services

    • Introducing Endpoint Compliance Services
    • Configuring Client Posture Services and Provisioning in Cisco ISE
  • Working with Network Access Devices

    • Review TACACS+
    • Cisco ISE TACACS+ Device Administration
    • Configure TACACS+ Device Administration
    • TACACS+ Device Administration Guidelines and Best Practises
    • Migrating from Cisco ACS to Cisco ISE
  • Lab outline:

    • Access the SISELab and Install ISE 2.4
    • Configure Initial Cisco ISE Setup, GUI Familiarisation, and System Certificate Usage
    • Integrate Cisco ISE with Active Directory
    • Configure Basic Policy on Cisco ISE
    • Configure Policy Sets
    • Configure Access Policy for Easy Connect
    • Configure Guest Access
    • Configure Guest Access Operations
    • Create Guest Reports
    • Configure Profiling
    • Customise the Cisco ISE Profiling Configuration
    • Create Cisco ISE Profiling Reports
    • Configure BYOD
    • Blacklisting a Device
    • Configure Cisco ISE Compliance Services
    • Configure Client Provisioning
    • Configure Posture Policies
    • Test and Monitor Compliance-Based Access
    • Test Compliance Policy
    • Configure Cisco ISE for Basic Device Administration
    • Configure TACACS+ Command Authorisation
    • (Optional) Lab 8-3: Configuring Backups and Patching
    • (Optional) Lab 8-4: Configuring Administrative Access
    • (Optional) Lab 8-5: Review of General Tools
    • (Optional) Lab 8-6: Report Operations

Team Training

Important Cisco ISE Course Information

  • Requirements

    • CCNA
    • CCNA Security
    • Introduction to 802.1X Operations for Cisco Security Professionals (802.1X)
    • Knowledge of Cisco Wireless LAN Controllers and Lightweight Access Points
    • Knowledge of basic command-line configuration of Cisco Catalyst switches
    • Familiarity with Microsoft Windows and Active Directory
    • To participate in the hands-on labs in this class, you need to bring a laptop computer with the following:
      • Windows 7 or 8.1 or 10 is recommended. Mac OSX 10.6 or greater is supported as well.
      • Intel Celeron or better processors are preferred.
      • 1 GB or more of RAM
      • Browser Requirements: Internet Explorer 10 or greater or Mozilla Firefox. (Safari and Mozilla Firefox for Mac OSX)
        Note: Our labs currently cannot run on Microsoft Edge (Windows 10) due to it not supporting Extensions/Add-ons or Google Chrome due to Java being removed from the platform itself.
      • All students are required to have administrator rights to their PCs and cannot be logged in to a domain using any Group Policies that will limit their machine's capabilities.
        If you do not have administrator rights to your PC, you at least need permissions to download, install, and run Cisco Any Connect Client and Java.
      • If you are participating in a WebEx event, it is highly recommended to take this class at a location that has bandwidth speeds at a minimum of 1 Mbps bandwidth speeds.
      • All PCs require the latest Java Runtime Environment, which can be downloaded from www.java.com.
  • Redeem Your Cisco Learning Credits (CLCs)

Cisco ISE Course Outline

  • Module 1: Introducing the Cisco Secure Access Solution and ISE Platform Architecture

    Lesson 1: The Cisco Secure Access Solution

    Lesson 2: Cisco ISE as a Network Access Policy Engine

  • Module 1: Introducing Cisco ISE Architecture and Deployment

    Lesson 1: Using Cisco ISE as a Network Access Policy Engine

    Lesson 2: Introducing Cisco ISE Deployment Models

  • Module 2: Cisco ISE Policy Enforcement

    Lesson 1: Introducing 802.1X and MAB Access: Wired and Wireless

    Lesson 2: Introducing Identity Management

    Lesson 3: Configuring Certificate Services

    Lesson 4: Introducing Cisco ISE Policy

    Lesson 5: Configuring Cisco ISE Policy Sets

    Lesson 6: Implementing Third-Party Network Access Device Support

    Lesson 7: Introducing Cisco TrustSec

    Lesson 8: Introducing EasyConnect

  • Module 3: Web Auth and Guest Services

    Lesson 1: Introducing Web Access with Cisco IS

    Lesson 2: Introducing ISE Guest Access Components

    Lesson 3: Configuring Guest Access Settings

    Lesson 4: Configuring Portals: Sponsors and Guests

  • Module 4: Cisco ISE Profiler

    Lesson 1: Introducing Cisco ISE Profiler

    Lesson 2: Configuring Cisco ISE Profiling

  • Module 5: Cisco ISE BYOD

    Lesson 1: Introducing the Cisco ISE BYOD Process

    Lesson 2: Describing BYOD Flow

    Lesson 3: Configuring My Devices Portal Settings

    Lesson 4: Configuring Certificates in BYOD Scenarios

  • Module 6: Cisco ISE Endpoint Compliance Services

    Lesson 1: Introducing Endpoint Compliance

    Lesson 2: Configuring Client Posture Services and Provisioning in Cisco ISE

  • Module 7: Cisco ISE with AMP and VPN-Based Services

    Lesson 1: Introducing VPN Access Using Cisco ISE

    Lesson 2: Configuring Cisco AMP for ISE

  • Module 8: Cisco ISE Integrated Solutions with APIs

    Lesson 1: Introducing Location-Based Authorisation

    Lesson 2: Introducing Cisco ISE 2.x pxGrid

  • Module 9: Working with Network Access Devices

    Lesson 1: Configuring TACACS+ for Cisco ISE Device Administration

  • Module 10: Cisco ISE Design (Self-Study)

    Lesson 1: Designing and Deployment Best Practises

    Lesson 2: Performing Cisco ISE Installation and Configuration Best Practises

    Lesson 3: Deploying Failover and High-Availability

  • Module 11: Configuring Third Party NAD Support

    (Optional/Self-Study/Reference)

    Lesson 1: Configuring Third-Party NAD Support (Optional, Self-Study, or Reference)

Cisco SISE Training FAQs

  • What is Cisco SISE?

    Cisco Identity Services Engine simplifies identity management across diver devices and applications.

  • How do I prepare for CCNP Security Track certification?

    The best way to prepare for this certification is to take the Cisco-approved training, as well as using the self-study materials provided.

  • How do I redeem my Cisco Learning Credits (CLCs) for this CCNP Security Track course?

    During your checkout of the course, make sure to select Credits & Vouchers within the payment method. Highlight and click CLC and enter the sales order number that you were issued by Cisco.

  • How do I take Cisco exam SISE 300-715 to obtain CCNP Security Track certification?

    You will need to register for the exam. Exams are offered as proctored exams at a test centre, or self-administered online.

  • How do I achieve the CCNP Security Track certification?

    To earn CCNP Security Track, you need to pass a core exam and a security track concentration exam of your choice. The 350-601 DCCOR is the core exam. Passing this 300-715 SISE exam completes your selected concentration exam. Comprehensive Cisco Certification information can be found here.

Questions about which training is right for you?

call 0800 282 353
chat Live Chat




100% Satisfaction Guaranteed

Your Training Comes with a 100% Satisfaction Guarantee!*

*Partner-delivered courses may have different terms that apply. Ask for details.

Online (WebEx)
Online (WebEx)
Online (WebEx)
Preferred method of contact:

Please Choose a Language

Canada - English

Canada - Français