Implementing and Configuring Cisco Identity Services Engine (SISE v3.0) Training

Level: Intermediate

The Implementing and Configuring Cisco Identity Services Engine (SISE) v3.0 course shows you how to deploy and use Cisco® Identity Services Engine (ISE) v2.4, an identity and access control policy platform that simplifies the delivery of consistent, highly secure access control across wired, wireless, and VPN connections. This hands-on course provides you with the knowledge and skills to implement and use Cisco ISE, including policy enforcement, profiling services, web authentication and guest access services, BYOD, endpoint compliance services, and TACACS+ device administration. Through expert instruction and hands-on practice, you will learn how to use Cisco ISE to gain visibility into what is happening in your network, streamline security policy management, and contribute to operational efficiency.

Key Features of this Cisco SISE Training:

  • Cisco Authorized course content
  • Authorized Cisco CCSI Instructor
  • Eligible for Cisco Learning Credit (CLC) redemption
  • Attend in-class, online or bring the course to your facility
  • Expansive course catalog to go deep into Cisco or broaden you skills beyond

You Will Learn How To:

  • Describe Cisco ISE deployments, including core deployment components and how they interact to create a cohesive security architecture.
  • Describe the advantages of such a deployment and how each Cisco ISE capability contributes to these advantages.
  • Describe concepts and configure components related to 802.1X and MAC Authentication Bypass (MAB) authentication, identity management, and certificate services.
  • Describe how Cisco ISE policy sets are used to implement authentication and authorization, and how to leverage this capability to meet the needs of your organization.
  • Describe third-party network access devices (NADs), Cisco TrustSec®, and Easy Connect.
  • Describe and configure web authentication, processes, operation, and guest services, including guest access components and various guest access scenarios.
  • Describe and configure Cisco ISE profiling services, and understand how to monitor these services to enhance your situational awareness about network-connected endpoints.
  • Describe best practices for deploying this profiler service in your specific environment.
  • Describe BYOD challenges, solutions, processes, and portals.
  • Configure a BYOD solution, and describe the relationship between BYOD processes and their related configuration components.
  • Describe and configure various certificates related to a BYOD solution.
  • Describe the value of the My Devices portal and how to configure this portal.
  • Describe endpoint compliance, compliance components, posture agents, posture deployment and licensing, and the posture service in Cisco ISE.
  • Describe and configure TACACS+ device administration using Cisco ISE, including command sets, profiles, and policy sets.
  • Understand the role of TACACS+ within the authentication, authentication, and accounting (AAA) framework and the differences between the RADIUS and TACACS+ protocols.
  • Migrate TACACS+ functionality from Cisco Secure Access Control System (ACS) to Cisco ISE, using a migration tool.

Choose the Training Solution That Best Fits Your Individual Needs or Organizational Goals

LIVE, INSTRUCTOR-LED

In Class & Live, Online Training

  • 5-day instructor-led training course
  • Authorized Cisco Training Provider
  • Providing over 20 years of Cisco Training
  • Pay later by invoice -OR- at the time of checkout by credit card
  • Attend Virtually from your Home or Office
View Course Details & Schedule

Standard $4195

Government $3775

RESERVE SEAT

PRODUCT #2830

TRAINING AT YOUR SITE

Team Training

  • Bring this or any training to your organization
  • Full - scale program development
  • Delivered when, where, and how you want it
  • Blended learning models
  • Tailored content
  • Expert team coaching
View Details ›

Customize Your Team Training Experience

CONTACT US

Save More On Training with FlexVouchers – A Unique Training Savings Account

Our FlexVouchers help you lock in your training budgets without having to commit to a traditional 1 voucher = 1 course classroom-only attendance. FlexVouchers expand your purchasing power to modern blended solutions and services that are completely customizable. For details, please call 888-843-8733 or chat live.

In Class & Live, Online Training

Time Zone Legend:
Eastern Time Zone Central Time Zone
Mountain Time Zone Pacific Time Zone

Note: This course runs for 5 Days *

*Events with the Partial Day Event clock icon run longer than normal but provide the convenience of half-day sessions.

Guaranteed to Run

When you see the "Guaranteed to Run" icon next to a course event, you can rest assured that your course event — date, time — will run. Guaranteed.

Partial Day Event

Learning Tree offers a flexible schedule program. If you cannot attend full day sessions, this option consists of four-hour sessions per day instead of the full-day session.

Important Cisco SISE Course Information

  • Prerequisites

    It is recommended, but not required, to have the following skills and knowledge before attending this course:

    • Familiarity with the Cisco IOS® Software command-line interface (CLI)
    • Familiarity with Cisco AnyConnect® Secure Mobility Client
    • Familiarity with Microsoft Windows operating systems
    • Familiarity with 802.1X
  • Who Should Attend this Course

    • Network security engineers
    • ISE administrators
    • Wireless network security engineers
    • Cisco integrators and partners
  • Course Benefits

    • Provide secure business and context-based access based on policies
    • Centrally configure and manage profiler, posture, guest, authentication, and
    • authorization services in a single web-based GUI console
    • Provide a streamlined experience for implementing and customizing guest network access
    • Gain leading-edge career skills for high-demand job roles and responsibilities focused on enterprise security
  • Redeem Your Cisco Learning Credits (CLCs)

  • Certifications

    • 300-715 SISE - CCNP Security, Cisco Certified Specialist - Security Identity Management Implementation
    • This course is part of the following Certifications: CCNP Security Track

Cisco SISE Course Outline

  •  Introducing Cisco ISE Architecture and Deployment

    • Using Cisco ISE as a Network Access Policy Engine
    • Cisco ISE Use Cases
    • Describing Cisco ISE Functions
    • Cisco ISE Deployment Models
    • Context Visibility
  • Cisco ISE Policy Enforcement

    • Using 802.1X for Wired and Wireless Access
    • Using MAC Authentication Bypass for Wired and Wireless Access
    • Introducing Identity Management
    • Configuring Certificate Services
    • Introducing Cisco ISE Policy
    • Implementing Third-Party Network Access Device Support
    • Introducing Cisco TrustSec
    • Cisco TrustSec Configuration
    • Easy Connect
  • Web Authentication and Guest Services

    • Introducing Web Access with Cisco ISE
    • Introducing Guest Access Components
    • Configuring Guest Access Settings
    • Configuring Sponsor and Guest Portals
  • Cisco ISE Profiler

    • Introducing Cisco ISE Profiler
    • Profiling Deployment and Best Practices
  • Cisco ISE BYOD

    • Introducing the Cisco ISE BYOD Process
    • Describing BYOD Flow
    • Configuring the My Devices Portal
    • Configuring Certificates in BYOD Scenarios
  • Cisco ISE Endpoint Compliance Services

    • Introducing Endpoint Compliance Services
    • Configuring Client Posture Services and Provisioning in Cisco ISE
  • Working with Network Access Devices

    • Review TACACS+
    • Cisco ISE TACACS+ Device Administration
    • Configure TACACS+ Device Administration
    • TACACS+ Device Administration Guidelines and Best Practices
    • Migrating from Cisco ACS to Cisco ISE
  • Lab outline:

    • Access the SISELab and Install ISE 2.4
    • Configure Initial Cisco ISE Setup, GUI Familiarization, and System Certificate Usage
    • Integrate Cisco ISE with Active Directory
    • Configure Basic Policy on Cisco ISE
    • Configure Policy Sets
    • Configure Access Policy for Easy Connect
    • Configure Guest Access
    • Configure Guest Access Operations
    • Create Guest Reports
    • Configure Profiling
    • Customize the Cisco ISE Profiling Configuration
    • Create Cisco ISE Profiling Reports
    • Configure BYOD
    • Blacklisting a Device
    • Configure Cisco ISE Compliance Services
    • Configure Client Provisioning
    • Configure Posture Policies
    • Test and Monitor Compliance-Based Access
    • Test Compliance Policy
    • Configure Cisco ISE for Basic Device Administration
    • Configure TACACS+ Command Authorization
    • (Optional) Lab 8-3: Configuring Backups and Patching
    • (Optional) Lab 8-4: Configuring Administrative Access
    • (Optional) Lab 8-5: Review of General Tools
    • (Optional) Lab 8-6: Report Operations

Team Training

Important Cisco ISE Course Information

  • Requirements

    • CCNA
    • CCNA Security
    • Introduction to 802.1X Operations for Cisco Security Professionals (802.1X)
    • Knowledge of Cisco Wireless LAN Controllers and Lightweight Access Points
    • Knowledge of basic command-line configuration of Cisco Catalyst switches
    • Familiarity with Microsoft Windows and Active Directory
    • To participate in the hands-on labs in this class, you need to bring a laptop computer with the following:
      • Windows 7 or 8.1 or 10 is recommended. Mac OSX 10.6 or greater is supported as well.
      • Intel Celeron or better processors are preferred.
      • 1 GB or more of RAM
      • Browser Requirements: Internet Explorer 10 or greater or Mozilla Firefox. (Safari and Mozilla Firefox for Mac OSX)
        Note: Our labs currently cannot run on Microsoft Edge (Windows 10) due to it not supporting Extensions/Add-ons or Google Chrome due to Java being removed from the platform itself.
      • All students are required to have administrator rights to their PCs and cannot be logged in to a domain using any Group Policies that will limit their machine's capabilities.
        If you do not have administrator rights to your PC, you at least need permissions to download, install, and run Cisco Any Connect Client and Java.
      • If you are participating in a WebEx event, it is highly recommended to take this class at a location that has bandwidth speeds at a minimum of 1 Mbps bandwidth speeds.
      • All PCs require the latest Java Runtime Environment, which can be downloaded from www.java.com.
  • Redeem Your Cisco Learning Credits (CLCs)

Cisco ISE Course Outline

  • Module 1: Introducing the Cisco Secure Access Solution and ISE Platform Architecture

    Lesson 1: The Cisco Secure Access Solution

    Lesson 2: Cisco ISE as a Network Access Policy Engine

  • Module 1: Introducing Cisco ISE Architecture and Deployment

    Lesson 1: Using Cisco ISE as a Network Access Policy Engine

    Lesson 2: Introducing Cisco ISE Deployment Models

  • Module 2: Cisco ISE Policy Enforcement

    Lesson 1: Introducing 802.1X and MAB Access: Wired and Wireless

    Lesson 2: Introducing Identity Management

    Lesson 3: Configuring Certificate Services

    Lesson 4: Introducing Cisco ISE Policy

    Lesson 5: Configuring Cisco ISE Policy Sets

    Lesson 6: Implementing Third-Party Network Access Device Support

    Lesson 7: Introducing Cisco TrustSec

    Lesson 8: Introducing EasyConnect

  • Module 3: Web Auth and Guest Services

    Lesson 1: Introducing Web Access with Cisco IS

    Lesson 2: Introducing ISE Guest Access Components

    Lesson 3: Configuring Guest Access Settings

    Lesson 4: Configuring Portals: Sponsors and Guests

  • Module 4: Cisco ISE Profiler

    Lesson 1: Introducing Cisco ISE Profiler

    Lesson 2: Configuring Cisco ISE Profiling

  • Module 5: Cisco ISE BYOD

    Lesson 1: Introducing the Cisco ISE BYOD Process

    Lesson 2: Describing BYOD Flow

    Lesson 3: Configuring My Devices Portal Settings

    Lesson 4: Configuring Certificates in BYOD Scenarios

  • Module 6: Cisco ISE Endpoint Compliance Services

    Lesson 1: Introducing Endpoint Compliance

    Lesson 2: Configuring Client Posture Services and Provisioning in Cisco ISE

  • Module 7: Cisco ISE with AMP and VPN-Based Services

    Lesson 1: Introducing VPN Access Using Cisco ISE

    Lesson 2: Configuring Cisco AMP for ISE

  • Module 8: Cisco ISE Integrated Solutions with APIs

    Lesson 1: Introducing Location-Based Authorization

    Lesson 2: Introducing Cisco ISE 2.x pxGrid

  • Module 9: Working with Network Access Devices

    Lesson 1: Configuring TACACS+ for Cisco ISE Device Administration

  • Module 10: Cisco ISE Design (Self-Study)

    Lesson 1: Designing and Deployment Best Practices

    Lesson 2: Performing Cisco ISE Installation and Configuration Best Practices

    Lesson 3: Deploying Failover and High-Availability

  • Module 11: Configuring Third Party NAD Support

    (Optional/Self-Study/Reference)

    Lesson 1: Configuring Third-Party NAD Support (Optional, Self-Study, or Reference)

Cisco SISE Training FAQs

  • What is Cisco SISE?

    Cisco Identity Services Engine simplifies identity management across diver devices and applications.

  • How do I prepare for CCNP Security Track certification?

    The best way to prepare for this certification is to take the Cisco-approved training, as well as using the self-study materials provided.

  • How do I redeem my Cisco Learning Credits (CLCs) for this CCNP Security Track course?

    During your checkout of the course, make sure to select Credits & Vouchers within the payment method. Highlight and click CLC and enter the sales order number that you were issued by Cisco.

  • How do I take Cisco exam SISE 300-715 to obtain CCNP Security Track certification?

    You will need to register for the exam. Exams are offered as proctored exams at a test center, or self-administered online.

  • How do I achieve the CCNP Security Track certification?

    To earn CCNP Security Track, you need to pass a core exam and a security track concentration exam of your choice. The 350-601 DCCOR is the core exam. Passing this 300-715 SISE exam completes your selected concentration exam. Comprehensive Cisco Certification information can be found here.

Questions about which training is right for you?

call 888-843-8733
chat Live Chat




100% Satisfaction Guaranteed

Your Training Comes with a 100% Satisfaction Guarantee!*

*Partner-delivered courses may have different terms that apply. Ask for details.

Online (WebEx)
Online (WebEx)
Online (WebEx)
Online (WebEx)
Campbell, CA
Online (WebEx)
Herndon, VA
Online (WebEx)
Overland Park, KS
Online (WebEx)
Preferred method of contact:
Chat Now

Please Choose a Language

Canada - English

Canada - Français