CCNP Security Identity Management SISE 300-715 – CS-SISE

CCNP Security Identity Management SISE 300-715

Course Code: CS-SISE

This 5-day course is aligned with the objectives for the CCNP Security SISE exam and will help you master topics such as Architecture and deployment, Policy enforcement, Web Authentication and Guest Services, Profiler, BYOD, Endpoint compliance, and Network access device administration.

Modules

– Comparing and Selecting AAA Options 

– TACACS+ 

– RADIUS 

– Comparing RADIUS and TACACS+

– What Is an Identity?

– Identity Stores

– Identity Source Sequences 

– Special Identity Sources 

– Extensible Authentication Protocol 

– EAP over LAN (802.1X) 

– Supplicant Options

– Devices Without a Supplicant

– MAC Authentication Bypass 

– Web Authentication 

– Remote-Access Connections 

– EasyConnect 

– Change of Authorization

– Automating MAC Authentication Bypass (MAB) 

– Posture Assessment 

– Mobile Device Management (MDM) 

– What Is Cisco ISE? 

– Personas 

– Physical or Virtual Appliances 

– ISE Deployment Scenarios 

 

– Logging in to ISE 

– Organization of the ISE GUI 

– Types of Policies in ISE

– Cisco Identity Services Engine Form Factors 

– Bootstrapping Cisco ISE 

– Network Devices 

– ISE Identity Stores 

– The Relationship Between Authentication and Authorization 

– Authentication Policy

– Understanding Policy Sets 

– Understanding Authentication Policies 

– Common Authentication Policy Examples 

– More on MAB 

– Restore the Authentication 

– Authentication Versus Authorization 

– Authorization Policies 

– Saving Conditions for Reuse 

– Authentication Configuration on Wired Switches 

– Authentication Configuration on WLCs 

– Verifying Dot1x and MAB 

 

– Web Authentication Scenarios 

– Configuring Centralized Web Authentication 

– Building CWA Authorization Policies 

– Verifying Centralized Web Authentication 

– Guest Services Overview 

– Portals, Portals, and More Portals!

– Configuring Guest Portals and Authorization Rules 

– Sponsors 

– SAML Authentication

– ISE Profiler 

– Infrastructure Configuration 

– Profiling Policies 

– ISE Profiler and CoA 

– Profiles in Authorization Policies 

– Verify Profiling 

– Certificate Authentication Primer 

– A Common Misconception About Active Directory 

– EAP-TLS 

– Configuring ISE for Certificate-Based Authentications

– BYOD Challenges 

– Onboarding Process 

– Configuring NADs for Onboarding 

– ISE Configuration for Onboarding 

– BYOD Onboarding Process Detailed 

– Verifying BYOD Flows 

– MDM Onboarding 

– Managing Endpoints 

– The Opposite of BYOD: Identify Corporate Systems 

– Ingress Access Control Challenges 

– What Is TrustSec?

– What Is a Security Group Tag? 

– What Is the TrustSec Architecture? 

– TrustSec-Enabled Network Access Devices 

– Network Device Admission Control (NDAC) 

– Defining the SGTs 

– Classification 

– Transport: SGT Exchange Protocol (SXP) 

– Transport: Native Tagging 

– Enforcement 

– Software-Defined Access (SD-Access) 

– MACsec 

– Posture Assessment with ISE

– Configuring Posture 

– The Endpoint Experience 

– Mobile Posture  

– Why Use a Phased Approach?

– Comparing authentication open to Standard 802.1X 

– Prepare ISE for a Staged Deployment 

– Monitor Mode 

– Low-Impact Mode 

– Closed Mode 

– Transitioning from Monitor Mode to Your End State 

– Wireless Networks 

– Configuring ISE Nodes in a Distributed Environment 

– Understanding the High Availability Options Available 

– Using Load Balancers 

– Maintaining ISE Deployments

– Logging 

– Diagnostic Tools 

– Troubleshooting Methodology 

– Troubleshooting Outside of ISE

– Integration Types in the ISE Ecosystem 

– pxGrid

– Vulnerabilities and Threats, Oh My! 

– Integrating Vulnerability Assessment Sources 

– Integrating with Threat Sources

– Device Administration AAA Refresher 

– Device Administration in ISE 

– Device Administration Global Settings

– Device Administration Work Center 

– Overview of IOS Device Administration AAA 

– Configure ISE and an IOS Device for Device Administration AAA 

– Testing and Troubleshooting

– Overview of WLC Device Administration AAA 

– Configure ISE and the WLC for Device Administration AAA 

– Testing and Troubleshooting 

Download our course content

Course Price : N676, 000