Cisco Identity Services Engine Essentials
- Código del Curso ISE-ESS
- Duración 3 días
- Versión 2.3
Otros Métodos de Impartición
Salta a:
Método de Impartición
Este curso está disponible en los siguientes formatos:
-
Cerrado
Cerrado
-
Aprendizaje Virtual
Aprendizaje virtual
Solicitar este curso en un formato de entrega diferente.
Temario
Parte superiorIn this two-day course, you will learn to deploy and manage Cisco ISE from the ground up, covering architecture, identity sources, authentication and authorization policies, endpoint profiling, and TACACS+ device administration, all reinforced with hands-on labs.
This course provides a focused, hands-on introduction to Cisco ISE, equipping you with the practical skills to deploy and manage secure network access. You will explore ISE architecture and design considerations, configure identity sources, and build authentication and authorization policies for wired and wireless users and devices. The course covers certificate-based authentication, identity source selection logic, and Active Directory integration, then moves into endpoint profiling, where you will configure probes, profile policies, and authorization rules to improve network visibility. You will also implement TACACS+ for centralized device administration, including command authorization for granular access control.
Calendario
Parte superiorDirigido a
Parte superiorThis class is intended for the following participants:
- Network security engineers
- ISE administrators
- Wireless network security engineers
- Cisco integrators and partners
- Consulting systems engineers
- Technical solutions architects
- Integrators who install and implement the Cisco ISE
- End users (Cisco customers) desiring the knowledge to install, configure, and deploy Cisco ISE
Objetivos del Curso
Parte superiorAfter completing this course, you will be able to:
- Understand Cisco ISE architecture, deployment models, and licensing
- Configure identity sources, including Active Directory and certificate-based authentication
- Apply identity source selection and fallback logic
- Build and manage authentication and authorization policy sets
- Deploy endpoint profiling with probes and profile-based authorization
- Centralize device administration and enforce command authorization with TACACS+
Contenido
Parte superiorCourse Outlines
- Cisco ISE Evolution, Foundation and Role
- Architecture and Design
- Cisco ISE Installation and Initial Config
- Identity Sources and Authentication Types
- Identity Selection and Resolution Logic
- Active Directory and LDAP Integration
- Cisco ISE Policy Framework
- Authentication Policies
- Authorization Policies
- Profiling Architecture and Capabilities
- Probes and Data Collection
- Profile Policies and Authorization
- Profile Monitoring and Design
- AAA and TACACS+
- TACACS+ Device Administration
- TACACS+ Command Authorization
Labs Outlines
Lab 1: Explore the Initial Cisco ISE Configuration, GUI and System Certificate
Lab 2: Integrate Cisco ISE with Active Directory
Lab 3: Configure MAB
Lab 4: Configure Wired 802.1X
Lab 5: Configure Wireless 802.1X and Optional Wired EAP-TLS and TEAP
Lab 6: Configure Profiling
Lab 7: Configure Authorization Policy Rules and Run Profiler Reports
Lab 8: Configure TACACS+ Basic Device Administration
Lab 9: Configure TACACS+ Command Authorization
Pre-requisitos
Parte superiorThe following skills are recommended:
- Having a CCNA or equivalent knowledge and skills
- Foundation-level wireless knowledge and skills
- Familiarity with Microsoft Windows and Microsoft Active Directory
- Familiarity with 802.1X
Certificación de Prueba
Parte superior- None
Más información
Parte superior- “Official course book provided to participants.”