Implementing Cisco Security Access Solutions (SISAS) 1.0

What’s Included

  • 12 months access
  • Classes taught by industry experts
  • Hands-on labs
  • Practice exam
  • Class notes
  • Comprehensive Student Guide
  • Expert mentors available to answer questions
  • Personal Success Adviser to help you reach your training goals

Overview

Implementing Cisco Secure Access Solutions (SISAS) v1.0 is a newly created five-day instructor-led training course that is part of the curriculum path leading to the Cisco Certified Network Professional Security (CCNP Security) certification. Additionally, it is designed to prepare security engineers with the knowledge and hands-on experience so that they can deploy Cisco’s Identity Services Engine and 802.1X secure network access. The goal of the course is to provide students with foundational knowledge and the capabilities to implement and managed network access security by utilizing Cisco ISE appliance product solution. The student will gain hands-on experience with configuring various advance Cisco security solutions for mitigating outside threats and securing devices connecting to the network. At the end of the course, students will be able to reduce the risk to their IT infrastructures and applications using Cisco’s ISE appliance feature and provide operational support identity and network access control.

Duration

32 Hours

Prerequisites

The knowledge and skills that a learner must have before attending this course are as follows:

  • Valid CCNA Security or CCSP Certification
  • Any CCIE Certification

Certification

CCNP Security

Exams

300-208 SISAS

Included Labs Simulations

  • Define Local User in Cisco ISE
  • Define the Switch as a NAD in Cisco ISE
  • Configure AAA Settings on Switch
  • Configure RADIUS Settings on Switch1
  • Configure Switch for 802.1X Monitor Mode
  • Verify IE Operation Before ISE PKI Enrollment
  • Verify the Supplicant Operation Before ISE PKI Enrollment
  • Enroll Cisco ISE in PKI – Part 1
  • Enroll Cisco ISE in PKI – Part 2
  • Explore System Behavior After ISE PKI Enrollment
  • Deploy AnyConnect Supplicant – Part 1
  • Deploy AnyConnect Supplicant – Part 2
  • Configure CA Trust with the AnyConnect Profile Editor
  • Join ISE to the Active Directory
  • Configure Authentication Against the Active Directory
  • Join the Workstation to the Active Directory
  • Test User and Machine Authentication Using Windows Credentials
  • Configure Employee-PC for EAP-TLS
  • Configure ISE for Certificate-Based Client Authentication
  • Test EAP-TLS
  • Enable EAP Chaining
  • Config Switch for AAA Authorization and 802.1X Low-Impact Mode
  • Retrieve User Groups from Active Directory
  • Config Authorization for IT Users and Domain Computers – Part 1
  • Config Authorization for IT Users and Domain Computers – Part 2
  • Config Authorization for IT Users and Domain Computers – Part 3
  • Config Authorization for IT Users and Domain Computers – Part 4
  • Config Authorization for IT Users and Domain Computers – Part 5
  • Configure Authorization for Remaining Employees
  • Config Authorization for Domain Administrators
  • Config Authorization for Local ISE Users
  • Config Switch for Central WebAuth
  • Config ISE Authentication for WebAuth
  • Config ISE Authorization to Enforce Traffic Redirection – Part 1
  • Config ISE Authorization to Enforce Traffic Redirection – Part 2
  • Config ISE Authorization to Enforce Traffic Redirection – Part 3
  • Configure ISE Authorization Rule for Employees Authenticated via WebAuth

Outline

  • Module 1: Threat Mitigation Through Identity Services
  • Module 2: Cisco ISE Fundamentals
  • Module 3: Advanced Access Control
  • Module 4: Web Authentication and Guest Access
  • Module 5: Endpoint Access Control Enhancements
  • Module 6: Access Control Troubleshooting

Target Audience

Implementing Cisco Secure Access Solutions (SISAS) v1.0 is designed to prepare security engineers with the knowledge and experience so that they can deploy Cisco’s Identity Services Engine and 802.1X secure network access. The goal of the course is to provide students with foundational knowledge and the capabilities to implement and managed network access security by utilizing Cisco ISE appliance product solution. The student will gain experience with configuring various advance Cisco security solutions for mitigating outside threats and securing devices connecting to the network. At the end of the course, students will be able to reduce the risk to their IT infrastructures and applications using Cisco’s ISE appliance feature and provide operational support identity and network access control. It is also perfect for students interested in pursuing their Cisco Certified Network Professional Security (CCNP Security) certification.

Objectives

  • Understand commonly implemented Extensible Authentication Protocols (EAP)
  • Understand 802.1X architecture, implementation and operation
  • Understand Cisco Identity Services Engine architecture and access control capabilities
  • Implement Web Authentication and Guest Access
  • Troubleshoot ISE
  • Understand Cisco TrustSec features
  • Understand Bring Your Own Device (BYOD) with ISE
  • Implement identity based authorization policies
  • Implement ISE Profiling
  • Implement MAC Authentication Bypass
  • Implement ISE Posture service
  • Understand the implement Internal and External authentication databases
  • Implement Public-Key Infrastructure with ISE

Target Audience

Implementing Cisco Secure Access Solutions (SISAS) v1.0 is designed to prepare security engineers with the knowledge and experience so that they can deploy Cisco’s Identity Services Engine and 802.1X secure network access. The goal of the course is to provide students with foundational knowledge and the capabilities to implement and managed network access security by utilizing Cisco ISE appliance product solution. The student will gain experience with configuring various advance Cisco security solutions for mitigating outside threats and securing devices connecting to the network. At the end of the course, students will be able to reduce the risk to their IT infrastructures and applications using Cisco’s ISE appliance feature and provide operational support identity and network access control. It is also perfect for students interested in pursuing their Cisco Certified Network Professional Security (CCNP Security) certification.

Expected Duration

32 Hours

SUBSCRIPTION COST


$1,390.00

 

NEED HELP OR NOT SURE?