Cisco Certification - Cisco Security

Introduction

Implementing Cisco Secure Access Solutions v1.0 is a newly created five-day instructor-led training course that is part of the curriculum path leading to the Cisco Certified Network Professional Security (CCNP© Security) Certification.

Additionally, it is designed to prepare security engineers with the knowledge and hands-on experience so that they can deploy Cisco’s Identity Services Engine and 802.1X secure network access.

The goal of the course is to provide individuals with foundational knowledge and the capabilities to implement and manage network access security by utilizing Cisco ISE appliance product solution.

Delegates will gain hands-on experience with configuring various advance Cisco security solutions for mitigating outside threats and securing devices connecting to the network.

At the end of this course, individuals will be able to reduce the risk to their IT infrastructures and applications using Cisco’s ISE appliance feature and provide operational support identity and network access control.

Pre-Requisites

This section lists the skills and knowledge that you must possess to benefit fully from the course. This section includes recommended Cisco learning offerings that the learners may complete to benefit fully from this course, including the following:

• Cisco Certified Network Associate (CCNA®) certification
• Cisco Certified Network Associate (CCNA®) Security certification
• Knowledge of Microsoft Windows operating system

Who should attend?

• Network Security Engineers

Course Objectives

Upon completing this course, delegates will be able to meet these overall objectives:

• Understand Cisco Identity Services Engine architecture and access control capabilities
• Understand 802.1X architecture, implementation and operation
• Understand commonly implemented Extensible Authentication Protocols (EAP)
• Implement Public-Key Infrastructure with ISE
• Understand the implement Internal and External authentication databases
• Implement MAC Authentication Bypass
• Implement identity based authorization policies
• Understand Cisco TrustSec features
• Implement Web Authentication and Guest Access
• Implement ISE Posture service
• Implement ISE Profiling
• Understand Bring Your Own Device (BYOD) with ISE
• Troubleshoot ISE

Course Outline

1: Threat Mitigation through Identity Services

• Identity Services
• 802.1X and EAP
• Configure 802.1X Components
• Lab 1-1: Bootstrap Identity System

2: ISE Fundamentals

• Describe Cisco ISE Features and configure the fundamentals
• Cisco ISE with PKI
• Lab 2-1: Enroll Cisco ISE with PKI
• Cisco ISE Authentication
• Lab 2-2: Implement MAB and Internal Authentication with ISE
• Cisco ISE with External Authentication
• Lab 2-3: Implementing External Authentication

3: Advance Access Control

• Certificate Based User Authentication
• Lab 3-1: Implement EAP-TLS
• Authorization
• Lab 3-2: Implement Authorization
• Cisco TrustSec

4: Web Authentication and Guest Access

• Web Authentication
• Lab 4-1: Implement Web Authentication
• Guest Access Services
• Lab 4-2: Implement Guest Access

5: Endpoint

• Posture
• Lab: 5-1: Implement Posture
• Profiler
• Lab 5-2: Implement Profiling
• BYOD

6: Troubleshooting Network Access Control

• Troubleshooting ISE
• Lab 6-1: Troubleshooting ISE