What You'll Learn

• TrustSec 2.0 solution architecture, components, and deployment methodologies using the ISE platform
• Configure the ISE platform in a network that includes Microsoft Active Directory
• Configure the 802.1X infrastructure for both wired and wireless 802.1X using Cisco Catalyst switches, Cisco Nexus switches, Cisco ISR routers, and Cisco Wireless LAN controllers
• Create a high-level and low-level design for the ISE platform deployment methodology, scaling requirements, and platform resiliency
• Deploy firewall-based VPN services using the Cisco ASA and Inline Posture
• Configure the ISE for classification and policy enforcement
• Deploy ISE-based profiling, posture, and guest services
• Troubleshoot user authentication and policy enforcement problems based on configuration error or network issue
• Create a low-level design for the ISE platform deployment methodology, scaling requirements, and platform resiliency

Who Needs to Attend

• Cisco Channel Partner systems and field engineers seeking to meet the education requirement to attain Authorized Technology Provider (ATP) status to sell Cisco ISE
• Security architects, design engineers, and others who need to learn how to design, deploy, and troubleshoot Cisco TrustSec 2.0 architecture with a focus on the ISE platform

Pre-requisites

• CCNA certification or equivalent level of experience configuring Cisco routers and switches
• Firewall/VPN courses or equivalent level of experience configuring the Cisco ASA firewall
• Knowledge of IEEE 802.1X
• 802.1X - Introduction to 802.1X Operations for Cisco Security Professionals

• CCNP certification or equivalent level of knowledge
• CCSP certification or equivalent level of knowledge
• Basic understanding of NAC appliance and Cisco ACS server version 5.X
• 802.1X - Introduction to 802.1X Operations for Cisco Security Professionals

Course Outline

1. Introducing the Cisco TrustSec 2.0 Solution and ISE Platform Architecture

2. Installing the Cisco ISE Software

3. Integrating Cisco ISE into Microsoft Active Directory

4. Introducing High Availability

5. Using Cisco ISE for Policy Enforcement

6. Configuring Cisco ISE for MAB

7. Configuring Cisco ISE for Wired and Wireless 802.1X Authentication

8. Deploying VPN-based Services Using the Cisco ASA Adaptive Security Appliance and Inline Posture

9. Configuring Web Authentication Using Cisco ISE

10. Introducing the Cisco ISE Guest Service

11. Introducing the Cisco ISE Profiler Service

12. Introducing the Cisco ISE Posture Service

13. Designing the Cisco TrustSec 2.0 Solution Architecture for the ISE Appliance

14. The lab outline is as follows:

• Lab 1: Lab Topology and Access
• Lab 2: Completing the Initial Setup Configuration
• Lab 3: Integrating Cisco ISE into Microsoft Active Directory
• Lab 4: Configuring Cisco ISE for MAB
• Lab 5: Configuring Cisco ISE for Wired 802.1X Authentication
• Lab 6: Configuring Cisco ISE for Wireless 802.1X Authentication
• Lab 7: Configuring Web Authentication and Policy Enforcement
• Lab 8: Creating Guest Users and Guest User Policies in the Sponsor Portal
• Lab 9: Configuring Cisco ISE for the Profiler Service
• Lab 10: Configuring Cisco ISE for the Posture Service
• Lab 11: Creating a Low-Level Design for Cisco ISE (Case Study