Course overview
thinQtank® Learning is offering a unique nine-day training camp comprised of five days of instructor-led learning for Implementing and Operating Cisco Security Core Technologies (SCOR) and Implementing and Configuring Cisco Identity Service Engine (SISE). As with all of our Cisco Training Experiences - exams are delivered in the classroom.
SCOR
This portion of the course prepares students to master the skills and technologies students need to implement core Cisco security solutions to provide advanced threat protection against cybersecurity attacks. Students will learn security for networks, cloud and content, endpoint protection, secure network access, visibility and enforcements. Students will get extensive hands-on experience deploying Cisco Firepower Next-Generation Firewall and Cisco ASA Firewall; configuring access control policies, mail policies, and 802.1X Authentication; and more. Students will get introductory practice on Cisco Stealthwatch Enterprise and Cisco Stealthwatch Cloud threat detection features.
SISE
This portion of the course is an intensive experience with enhanced hands-on labs that cover all facets of Cisco Identity Services Engine (ISE) version 2.4. The training provides students with the knowledge and skills to enforce security compliance for wired and wireless endpoints and enhance infrastructure security using the Cisco ISE.
In this course, students will learn about the Cisco ISE, a next-generation identity and access control policy platform that provides a single policy plane across the entire organization. The ISE combines multiple services including authentication, authorization, and accounting (AAA) using 802.1x, MAB, web authentication, posture, profiling, device on-boarding, guest services, and VPN access into a single context-aware identity-based platform.
What's included
14 itemsthinQtank® Learning Accelerated Custom Exam Study Guide for the ENCORE and ENARSI exams
Exam delivery in classroom with 98% success
Custom and focused exam preparation software and materials
Course specific thinQtank® Learning publications to promote a fun and exciting learning
Membership to the thinQtank® Learning University Online
WE DO NOT "TEACH THE TEST" - Students will receive valuable examples and discussion
Receive all reading material and study guides when you register
All courses taught by CCIE Certified instructors
Additional hours of remote lab access
Custom video recordings with even more in-depth learning of course topics
Customized practice exam software
Digital courseware
Retake any or all portions of the course as many times as you like in person or live on-line for 24 months
Six months mentoring access to CCIE engineers after completing the course
What you'll be able to do
31 objectives- Describe information security concepts and strategies within the network
- Describe common TCP/IP, network application, and endpoint attacks
- Describe how various network security technologies work together to guard against attacks
- Implement access control on Cisco ASA appliance and Cisco Firepower Next-Generation Firewall
- Describe and implement basic email content security features and functions provided by Cisco Email Security Appliance
- Describe and implement web content security features and functions provided by Cisco Web Security Appliance
- Describe Cisco Umbrella security capabilities, deployment models, policy management, and Investigate console
- Introduce VPNs and describe cryptography solutions and algorithms
- Describe Cisco secure site-to-site connectivity solutions and explain how to deploy Cisco IOS VTI-based point-to-point IPsec VPNs, and point-to-point IPsec VPN on the Cisco ASA and Cisco FirePower NGFW
- Describe and deploy Cisco secure remote access connectivity solutions and describe how to configure 802.1X and EAP authentication
- Provide basic understanding of endpoint security and describe AMP for Endpoints architecture and basic features
- Examine various defenses on Cisco devices that protect the control and management plane
- Configure and verify Cisco IOS Software Layer 2 and Layer 3 Data Plane Controls
- Describe Cisco Stealthwatch Enterprise and Stealthwatch Cloud solutions
- Describe basics of cloud computing and common cloud attacks and how to secure cloud environmen
- ISE deployment options including node types, personas, and licensing
- Install certificates into ISE using a Windows 2012 Certificate Authority (CA)
- Configure the Local and Active Directory Based Identity Store and use of Identity Source Sequences
- Configure AAA clients and network device groups
- Implement Policy Sets to streamline Authentication and Authorization in the organization
- Deploy EasyConnect as an alternative to 802.1X port-based authentication
- Implement 802.1X for wired and wireless networks using the AnyConnect 4.x NAM module, the latest dot1x commands on a catalyst switch, and version 8.4 of the vWLC
- Configure policies to allow MAC Authentication Bypass (MAB) of endpoints
- Use central web authentication (CWA) for redirection of legitimate domain users who need to register devices on the network using MAC addresses (device registration)
- Configure hotspot guest access, self-registration guest access, and sponsored guest access
- Configure profiler services in ISE and use newer probes available in IOS switch code 15.x as well as vWLC 8.4 code
- Work with profiling feeds, logical profiles, and building profiling conditions to match network endpoints
- Configure posture assessments using the new Cisco AnyConnect Secure Mobility 4.x posture module
- Configure Cisco ISE as a TACACS+ Server for Device Administration with Command Authorization
- Configure Cisco ISE to integrate with a 5500-X ASA and a Catalyst Switch for TrustSec and implement end-to-end Security Group Tagging (SGT) and Security Group Access Control (SGACL)
- Maintenance, best practices, and logging
The exam
350-701- 350-701 - Implementing and Operating Cisco Security Core Technologies (SCOR)
- 300-715 - Implementing and Configuring Cisco Identity Services Engine (SISE)
Who it's for, and what you need first
Target Audience
- Security and Network Engineer
- Network Designer
- Network Administrator
- Systems and Consulting Systems Engineer
- Technical Solutions Architect
- Installers and implementers Cisco ISE
- End users installing, configuring, and deploy Cisco ISE
Prerequisites
- Skills and knowledge equivalent to CCNA
- Familiarity with Ethernet and TCP/IP networking
- Knowledge of the Windows operating system
- Knowledge of IOS networking and concepts
- Basics of networking security concepts
- Foundation-level wireless knowledge and skills
- Familiarity with 802.1X and Cisco ASA
How it's delivered
Instructor-Led Training
Immersive Live-Online Training
On-Site and Custom Delivery