CCNP Security Identity Management SISE 300-715 – CS-SISE
CCNP Security Identity Management SISE 300-715
Course Code: CS-SISE
This 5-day course is aligned with the objectives for the CCNP Security SISE exam and will help you master topics such as Architecture and deployment, Policy enforcement, Web Authentication and Guest Services, Profiler, BYOD, Endpoint compliance, and Network access device administration.
- Duration: 5 Day
- Level: Professional
- Technology: Cisco Security
- Delivery Method: ILT / VILT
- Training Credits: NA
This course is primarily intended for:
– Cisco partners and integrators, ISE administrators, Network and Wireless network security engineers
– Individuals preparing for the CCNP Security Certification, specifically the SISE elective.
There are no formal prerequisites for CCNP Security. In other words, you do not have to pass the CCNA Security or any other certifications to take CCNP-level exams. On the other hand, CCNP candidates often have three to five years of experience in IT and cybersecurity.
The ideal knowledge and skills that a learner should have before attending this course are as follows:Â
– Be Familiar with Microsoft Windows Operating System
– Familiar with 802.1X and with Cisco’s secure mobility client – AnyConnect
– Familiar with Cisco’s IOS CLI
On completion of this course, participants should be familiar with:
Architecture and Deployment:
– Configure Personas
– Describe Deployment Options
Policy Enforcement:
– Configure native AD and LDAP
– Describe identity store options
– Configure wired/wireless 802.1x network access
– Explain the importance of an endpoint patching strategy
– Configure 802.1x phasing deployment
– Configure network access devices
– Implement MAB
– Configure Cisco TrustSec
– Configure policies including authentication and authorization profiles
Web Auth and Guest Services:
– Configure web authentication
– Configure guest access services
– Configure sponsor and guest portals
Profiler:
– Implement profiler services
– Implement probes
– Implement CoA
– Configure endpoint identity management
BYOD:
– Describe Cisco BYOD functionality
– BYOD device onboarding using internal CA with Cisco switches and Cisco wireless LAN controllers
– Configure certificates for BYOD
– Configure blacklist/whitelist
Endpoint Compliance:
– Describe endpoint compliance, posture services, and client provisioning
– Configure posture conditions and policy and client provisioning
– Configure the compliance module
– Configure Cisco ISE posture agents and operational modes
– Describe supplicant, supplicant options, authenticator, and server
Network Access Device Management:
– Compare AAA protocols
– Configure TACACS+ device administration and command authorization
The Implementing and Configuring Cisco Identity Services Engine (SISE 300-715) exam are one of the elective options for the CCNP Security certification. Passing the associated exam certifies your knowledge of Cisco Identify Services Engine, including architecture and deployment, policy enforcement, Web Auth and guest services, profiler, BYOD, endpoint compliance, and network access device administration.
Modules
– Comparing and Selecting AAA OptionsÂ
– TACACS+Â
– RADIUSÂ
– Comparing RADIUS and TACACS+
– What Is an Identity?
– Identity Stores
– Identity Source SequencesÂ
– Special Identity SourcesÂ
– Extensible Authentication ProtocolÂ
– EAP over LAN (802.1X)Â
– Supplicant Options
– Devices Without a Supplicant
– MAC Authentication BypassÂ
– Web AuthenticationÂ
– Remote-Access ConnectionsÂ
– EasyConnectÂ
– Change of Authorization
– Automating MAC Authentication Bypass (MAB)Â
– Posture AssessmentÂ
– Mobile Device Management (MDM)Â
– What Is Cisco ISE?Â
– PersonasÂ
– Physical or Virtual AppliancesÂ
– ISE Deployment ScenariosÂ
– Logging in to ISEÂ
– Organization of the ISE GUIÂ
– Types of Policies in ISE
– Cisco Identity Services Engine Form FactorsÂ
– Bootstrapping Cisco ISEÂ
– Network DevicesÂ
– ISE Identity StoresÂ
– The Relationship Between Authentication and AuthorizationÂ
– Authentication Policy
– Understanding Policy SetsÂ
– Understanding Authentication PoliciesÂ
– Common Authentication Policy ExamplesÂ
– More on MABÂ
– Restore the AuthenticationÂ
– Authentication Versus AuthorizationÂ
– Authorization PoliciesÂ
– Saving Conditions for ReuseÂ
– Authentication Configuration on Wired SwitchesÂ
– Authentication Configuration on WLCsÂ
– Verifying Dot1x and MABÂ
– Web Authentication ScenariosÂ
– Configuring Centralized Web AuthenticationÂ
– Building CWA Authorization PoliciesÂ
– Verifying Centralized Web AuthenticationÂ
– Guest Services OverviewÂ
– Portals, Portals, and More Portals!
– Configuring Guest Portals and Authorization RulesÂ
– SponsorsÂ
– SAML Authentication
– ISE ProfilerÂ
– Infrastructure ConfigurationÂ
– Profiling PoliciesÂ
– ISE Profiler and CoAÂ
– Profiles in Authorization PoliciesÂ
– Verify ProfilingÂ
– Certificate Authentication PrimerÂ
– A Common Misconception About Active DirectoryÂ
– EAP-TLSÂ
– Configuring ISE for Certificate-Based Authentications
– BYOD ChallengesÂ
– Onboarding ProcessÂ
– Configuring NADs for OnboardingÂ
– ISE Configuration for OnboardingÂ
– BYOD Onboarding Process DetailedÂ
– Verifying BYOD FlowsÂ
– MDM OnboardingÂ
– Managing EndpointsÂ
– The Opposite of BYOD: Identify Corporate SystemsÂ
– Ingress Access Control ChallengesÂ
– What Is TrustSec?
– What Is a Security Group Tag?Â
– What Is the TrustSec Architecture?Â
– TrustSec-Enabled Network Access DevicesÂ
– Network Device Admission Control (NDAC)Â
– Defining the SGTsÂ
– ClassificationÂ
– Transport: SGT Exchange Protocol (SXP)Â
– Transport: Native TaggingÂ
– EnforcementÂ
– Software-Defined Access (SD-Access)Â
– MACsecÂ
– Posture Assessment with ISE
– Configuring PostureÂ
– The Endpoint ExperienceÂ
– Mobile Posture Â
– Why Use a Phased Approach?
– Comparing authentication open to Standard 802.1XÂ
– Prepare ISE for a Staged DeploymentÂ
– Monitor ModeÂ
– Low-Impact ModeÂ
– Closed ModeÂ
– Transitioning from Monitor Mode to Your End StateÂ
– Wireless NetworksÂ
– Configuring ISE Nodes in a Distributed EnvironmentÂ
– Understanding the High Availability Options AvailableÂ
– Using Load BalancersÂ
– Maintaining ISE Deployments
– LoggingÂ
– Diagnostic ToolsÂ
– Troubleshooting MethodologyÂ
– Troubleshooting Outside of ISE
– Integration Types in the ISE EcosystemÂ
– pxGrid
– Vulnerabilities and Threats, Oh My!Â
– Integrating Vulnerability Assessment SourcesÂ
– Integrating with Threat Sources
– Device Administration AAA RefresherÂ
– Device Administration in ISEÂ
– Device Administration Global Settings
– Device Administration Work CenterÂ
– Overview of IOS Device Administration AAAÂ
– Configure ISE and an IOS Device for Device Administration AAAÂ
– Testing and Troubleshooting
– Overview of WLC Device Administration AAAÂ
– Configure ISE and the WLC for Device Administration AAAÂ
– Testing and TroubleshootingÂ