Course Description
Implementing Cisco Secure Access Solutions (SISAS) v1.0 is a newly created five-day instructor-led training (vILT) course is part of the curriculum path leading to the Cisco Certified Network Professional Security (CCNP© Security) certification. Additionally, it is designed to prepare security engineers with the knowledge and hands-on experience so that they can deploy Cisco’s Identity Services Engine and 802.1X secure network access. The goal of the course is to provide you with foundational knowledge and the capabilities to implement and managed network access security by utilizing Cisco ISE appliance product solution. You will gain hands-on experience with configuring various advance Cisco security solutions for mitigating outside threats and securing devices connecting to the network. At the end of the course, you will be able to reduce the risk to their IT infrastructures and applications using Cisco’s ISE appliance feature and provide operational support identity and network access control.
Now available in e-learning for a fraction of the ILT (Instructor Led Training) cost!
Cisco has revolutionized e-learning You will now receive the exact same content and labs in a self-paced format complete with HD video, searchable transcripts, full Student Guide textbook, hands-on labs (just like the ILT labs) and graded assessments. It is the utmost, interactive and state-of-the-art authorized Cisco e-learning available.
Who should attend
The primary audience for this course is as follows:
- Network Security Engineers
Certifications
This course is part of the following Certifications:
- Cisco Certified Network Professional Security (CCNP Security)
Prerequisites
This section lists the skills and knowledge that learners must possess to benefit fully from the course. This section includes recommended Cisco learning offerings that the learners may complete to benefit fully from this course, including the following:
- Cisco Certified Network Associate (CCNA®) certification
- Cisco Certified Network Associate (CCNA®) Security certification
- Knowledge of Microsoft Windows operating system
Course Objectives
Upon completing this course, you will be able to meet these overall objectives:
- Understand Cisco Identity Services Engine architecture and access control capabilities
- Understand 802.1X architecture, implementation and operation
- Understand commonly implemented Extensible Authentication Protocols (EAP)
- Implement Public-Key Infrastructure with ISE
- Understand the implement Internal and External authentication databases
- Implement MAC Authentication Bypass
- Implement identity based authorization policies
- Understand Cisco TrustSec features
- Implement Web Authentication and Guest Access
- Implement ISE Posture service
- Implement ISE Profiling
- Understand Bring Your Own Device (BYOD) with ISE
- Troubleshoot ISE
Detailed Course Outline
Module 1: Threat Mitigation through Identity Services
- Identity Services
- 802.1X and EAP
- Configure 802.1X Components
- Lab 1-1: Bootstrap Identity System
Module 2: ISE Fundamentals
- Describe Cisco ISE Features and configure the fundamentals
- Cisco ISE with PKI
- Lab 2-1: Enroll Cisco ISE with PKI
- Cisco ISE Authentication
- Lab 2-2: Implement MAB and Internal Authentication with ISE
- Cisco ISE with External Authentication
- Lab 2-3: Implementing External Authentication
Module 3: Advance Access Control
- Certificate Based User Authentication
- Lab 3-1: Implement EAP-TLS
- Authorization
- Lab 3-2: Implement Authorization
- Cisco TrustSec
Module 4: Web Authentication and Guest Access
- Web Authentication
- Lab 4-1: Implement Web Authentication
- Guest Access Services
- Lab 4-2: Implement Guest Access
Module 5: Endpoint
- Posture
- Lab: 5-1: Implement Posture
- Profiler
- Lab 5-2: Implement Profiling
- BYOD
Module 6: Troubleshooting Network Access Control
- Troubleshooting ISE
- Lab 6-1: Troubleshooting ISE
Course Curriculum
Module 1: Threat Mitigation through Identity Services
- No items in this section
Module 2: ISE Fundamentals
- No items in this section
Module 3: Advance Access Control
- No items in this section
Module 4: Module4: Web Authentication and Guest Access
- No items in this section
Module 5: Endpoint
- No items in this section
Module 6: Troubleshooting Network Access Control
- No items in this section
Duration 5 days