Cisco Identity Services Engine Essentials
- Course Code ISE-ESS
- Duration 3 days
- Version 2.3
Course Delivery
Additional Payment Options
-
GTC 29 inc. VAT
GTC, Global Knowledge Training Credit, please contact Global Knowledge for more details
- CLC Please Call 0118 912 1929 excl. VAT
Jump to:
Course Delivery
This course is available in the following formats:
-
Company Event
Event at company
-
Public Classroom
Traditional Classroom Learning
-
Virtual Learning
Learning that is virtual
Request this course in a different delivery format.
Course Overview
TopIn this two-day course, you will learn to deploy and manage Cisco ISE from the ground up, covering architecture, identity sources, authentication and authorization policies, endpoint profiling, and TACACS+ device administration, all reinforced with hands-on labs.
This course provides a focused, hands-on introduction to Cisco ISE, equipping you with the practical skills to deploy and manage secure network access. You will explore ISE architecture and design considerations, configure identity sources, and build authentication and authorization policies for wired and wireless users and devices. The course covers certificate-based authentication, identity source selection logic, and Active Directory integration, then moves into endpoint profiling, where you will configure probes, profile policies, and authorization rules to improve network visibility. You will also implement TACACS+ for centralized device administration, including command authorization for granular access control.
Course Schedule
TopTarget Audience
TopThis class is intended for the following participants:
- Network security engineers
- ISE administrators
- Wireless network security engineers
- Cisco integrators and partners
- Consulting systems engineers
- Technical solutions architects
- Integrators who install and implement the Cisco ISE
- End users (Cisco customers) desiring the knowledge to install, configure, and deploy Cisco ISE
Course Objectives
TopAfter completing this course, you will be able to:
- Understand Cisco ISE architecture, deployment models, and licensing
- Configure identity sources, including Active Directory and certificate-based authentication
- Apply identity source selection and fallback logic
- Build and manage authentication and authorization policy sets
- Deploy endpoint profiling with probes and profile-based authorization
- Centralize device administration and enforce command authorization with TACACS+
Course Content
TopCourse Outlines
- Cisco ISE Evolution, Foundation and Role
- Architecture and Design
- Cisco ISE Installation and Initial Config
- Identity Sources and Authentication Types
- Identity Selection and Resolution Logic
- Active Directory and LDAP Integration
- Cisco ISE Policy Framework
- Authentication Policies
- Authorization Policies
- Profiling Architecture and Capabilities
- Probes and Data Collection
- Profile Policies and Authorization
- Profile Monitoring and Design
- AAA and TACACS+
- TACACS+ Device Administration
- TACACS+ Command Authorization
Labs Outlines
Lab 1: Explore the Initial Cisco ISE Configuration, GUI and System Certificate
Lab 2: Integrate Cisco ISE with Active Directory
Lab 3: Configure MAB
Lab 4: Configure Wired 802.1X
Lab 5: Configure Wireless 802.1X and Optional Wired EAP-TLS and TEAP
Lab 6: Configure Profiling
Lab 7: Configure Authorization Policy Rules and Run Profiler Reports
Lab 8: Configure TACACS+ Basic Device Administration
Lab 9: Configure TACACS+ Command Authorization
Course Prerequisites
TopThe following skills are recommended:
- Having a CCNA or equivalent knowledge and skills
- Foundation-level wireless knowledge and skills
- Familiarity with Microsoft Windows and Microsoft Active Directory
- Familiarity with 802.1X
Test Certification
Top- None
Further Information
Top- “Official course book provided to participants.”