Course Outline
Introduction to Cisco Identity Services Engine (ISE)
- Foundations of Network Access Control (NAC)
- Architectural overview of Cisco ISE
- Strategic role of Cisco ISE in securing network infrastructure
Implementing Cisco ISE
- Selection of deployment architectures
- Infrastructure requirements for hardware and software
- Initial configuration and environmental setup
- Integration protocols with network devices
Authentication Mechanisms in Cisco ISE
- Supported authentication methods and protocols
- Implementation of 802.1X authentication frameworks
- Utilization of MAC Authentication Bypass (MAB)
- Configuration of web-based authentication
- Deployment of EAP-TLS and certificate-based verification
Authorization and Access Governance
- Implementation of Role-Based Access Control (RBAC)
- Definition of policy sets and administrative policies
- Configuration of enforcement profiles
- Establishment of authorization rules and conditional logic
- Application of Access Control Lists (ACLs)
Network Profiling Capabilities
- Device identification and attribute extraction
- Creation and management of profiling policies
- Assignment of dynamic VLANs based on device type
- Utilization of profiling reports and analytic dashboards
Endpoint Compliance and Posture Assessment
- Formulation of posture evaluation policies
- Execution of remediation actions for non-compliant endpoints
- Configuration of compliance verification modules
- Ongoing monitoring of compliance status
Guest Access Management via Cisco ISE
- Administration of guest services and access portals
- Definition of guest access policies and restrictions
- Customization of guest experience through portal design
- Implementation of self-service guest management tools
Ensuring High Availability and Redundancy
- Architectural strategies for ISE high availability
- Management of failover and load balancing processes
- Protocols for data backup and system restoration
Monitoring and Reporting Functions
- Review of system logs and event viewers
- Implementation of real-time operational monitoring
- Generation of standard and custom compliance reports
- Configuration of alerts and notification workflows
Troubleshooting Cisco ISE Systems
- Application of diagnostic tools and troubleshooting methodologies
- Resolution of common operational issues
- Utilization of debugging features and log analysis
Security Best Practices and Governance
- Hardening Cisco ISE configurations for enhanced security
- Adherence to compliance and regulatory standards
- Optimization of scalability and system performance
Integration with the Cisco Security Ecosystem
- Synergy with Cisco Adaptive Security Appliance (ASA)
- Integration with Cisco AnyConnect VPN services
- Coordination with Cisco Stealthwatch for network visibility
Maintenance and Upgrade Procedures
- Execution of software upgrade cycles
- Management of security patches and updates
- Adoption of ongoing maintenance best practices
Conclusion and Strategic Next Steps
Requirements
- Fundamental knowledge of networking principles and security core concepts
Target Audience
- Network administrators
- IT security specialists
Testimonials (3)
The laboratory tool and the knowledge of trainer about network solutions
Michael Angelo Angeleles - Metrobank
Course - Cisco CCNP
Good contact with the trainer
Radziszewski - EduBroker Sp. z o.o.
Course - SIP protocol in VoIP
Experience of the trainor and interaction