Course Overview

thinQtank® Learning is offering a unique four-day training camp for Implementing and Configuring Cisco Identity Service Engine (SISE). As with all of our Cisco Training Experiences - exams are delivered in the classroom.

This course is an intensive experience with enhanced hands-on labs that cover all facets of Cisco Identity Services Engine (ISE) version 2.4. The training provides students with the knowledge and skills to enforce security compliance for wired and wireless endpoints and enhance infrastructure security using the Cisco ISE.

In this course, students will learn about the Cisco ISE, a next-generation identity and access control policy platform that provides a single policy plane across the entire organization. The ISE combines multiple services including authentication, authorization, and accounting (AAA) using 802.1x, MAB, web authentication, posture, profiling, device on-boarding, guest services, and VPN access into a single context-aware identity-based platform.

Our Learning Exclusive

In our classroom, students receive gigabytes of take-home CBT and lab material with over four-hundred labs to keep practicing and refining the skills learned in the classroom. Additionally, our students receive:

■    thinQtank® Learning Accelerated Custom Exam Study Guide for the ENCORE and ENARSI exams
■    Exam delivery in classroom with 98% success
■    Custom and focused exam preparation software and materials
■    Course specific thinQtank® Learning publications to promote a fun and exciting learning
■    Membership to the thinQtank® Learning University Online
■    WE DO NOT "TEACH THE TEST" - Students will receive valuable examples and discussion
■    Receive all reading material and study guides when you register
■    All courses taught by CCIE Certified instructors

Course Objectives

After taking this course, students should be able to:

■    ISE deployment options including node types, personas, and licensing
■    Install certificates into ISE using a Windows 2012 Certificate Authority (CA)
■    Configure the Local and Active Directory Based Identity Store and use of Identity Source Sequences
■    Configure AAA clients and network device groups
■    Implement Policy Sets to streamline Authentication and Authorization in the organization
■    Deploy EasyConnect as an alternative to 802.1X port-based authentication
■    Implement 802.1X for wired and wireless networks using the AnyConnect 4.x NAM module, the latest dot1x commands on a catalyst switch, and version 8.4 of the vWLC
■    Configure policies to allow MAC Authentication Bypass (MAB) of endpoints
■    Use central web authentication (CWA) for redirection of legitimate domain users who need to register devices on the network using MAC addresses (device registration)
■    Configure hotspot guest access, self-registration guest access, and sponsored guest access
■    Configure profiler services in ISE and use newer probes available in IOS switch code 15.x as well as vWLC 8.4 code
■    Work with profiling feeds, logical profiles, and building profiling conditions to match network endpoints
■    Configure posture assessments using the new Cisco AnyConnect Secure Mobility 4.x posture module
■    Configure Cisco ISE as a TACACS+ Server for Device Administration with Command Authorization
■    Configure Cisco ISE to integrate with a 5500-X ASA and a Catalyst Switch for TrustSec and implement end-to-end Security Group Tagging (SGT) and Security Group Access Control (SGACL)
■    Maintenance, best practices, and logging

Exclusive Package Ensuring Success

■    Additional hours of remote lab access
■    Custom video recordings with even more in-depth learning of course topics
■    Customized practice exam software
■    Digital courseware
■    Retake any or all portions of the course as many times as you like in person or live on-line for 24 months
■    Six months mentoring access to CCIE engineers after completing the course

Course Duration

■    Four days of instructor-led learning
■    60% lecture, 40% hands-on labs

Prerequisites

■    Skills and knowledge equivalent to CCNA
■    Familiarity with Ethernet and TCP/IP networking
■    Knowledge of the Windows operating system
■    Knowledge of IOS networking and concepts
■    Basics of networking security concepts
■    Foundation-level wireless knowledge and skills
■    Familiarity with 802.1X and Cisco ASA

Target Audience

■    Security and Network Engineer
■    Network Designer
■    Network Administrator
■    Systems and Consulting Systems Engineer
■    Technical Solutions Architect
■    Installers and implementers Cisco ISE
■    End users installing, configuring, and deploy Cisco ISE

Exam Information

■    300-715 - Implementing and Configuring Cisco Identity Services Engine (SISE)

Delivery Methods

■    Instructor-Led Training
■    Immersive Live-Online Training
■    On-Site and Custom Delivery