5 Days


It is recommended that a learning have the following knowledge and skills before attending this course:

  • CCNA Security certification
  • Foundation-level network knowledge and skills necessary to install, configure, operate, and troubleshoot network devices and applications
  • Foundation-level wireless knowledge and skills
  • Basic knowledge of Cisco IOS networking and concepts

Course Content

This course discusses the Cisco Identity Services Engine (ISE), an identity and access control policy platform that provides a single policy plane across the entire organization, combining multiple services, including authentication, authorization, and accounting (AAA), posture, profiling, device on-boarding, and guest management, into a single context-aware identity-based platform. The training provides learners with the knowledge and skills to enforce security posture compliance for wired and wireless endpoints and enhance infrastructure security using the Cisco ISE. Upon completion of this course, you will be able to:

  • Describe Cisco ISE architecture, installation, and distributed deployment options
  • Configure Network Access Devices (NADs), policy components, and basic authentication and authorization policies in Cisco ISE – Implement Cisco ISE web authentication and guest services
  • Deploy Cisco ISE profiling, posture and client provisioning services
  • Describe administration, monitoring, troubleshooting, and TrustSec SGA security
  • Configure device administration using TACACS+ in Cisco ISE

Course Outline

  • Module 1: Course Introduction
  • Module 2: Cisco ISE Policy Enforcement
  • Module 3: Web Auth & Guest Services
  • Module 4: Cisco ISE Profiler
  • Module 5: Cisco ISE BYOD
  • Module 6: Cisco ISE Endpoint Compliance Services
  • Module 7: Cisco ISE with AMP and VPN-Based Services
  • Module 8: Cisco ISE Integrated Solutions with APIs
  • Module 9: Working with Network Access Devices
  • Module 10: Cisco ISE Design (Self-Study)
  • Module 11: Configuring Third Party NAD Support (optional/Self-Study/Reference)

Who Should Attend

  • ISE Administrators/Engineers
  • Wireless Administrators/Engineers
  • Consulting Systems Engineers
  • Technical/Wireless/BYOD/Security Solutions Architects
  • ATP partner systems and field engineers
  • Systems integrators who install and implement the Cisco Identity Service Engine version 1.3