Configuring Cisco ISE Essentials for SD-Access

Course Description

The Configuring Cisco ISE Essentials for SD-Access (ISESDA) v1.0 course shows you how to deploy the Cisco® Identity Services Engine (ISE) to support the Software-
Defined Access (SD-Access) solution within your enterprise networks. You will gain an
understanding of how Cisco ISE is utilized by the SD-Access solution to provide security policies across the organization. You will learn Cisco ISE fundamentals and get handson practice configuring ISE, policies, AAA client configuration, VPN access, integration, wireless guest access, and more.


Understanding of network routing and switching principles equivalent to the Cisco CCNA® certification level.

Who Should Attend

  • System engineers
  • Network engineers
  • Technical architects
  • Technical support engineers
  • Cisco integrators and partners

Course Information

Length: 2 day

Format: Lecture and Lab

Delivery Method: Virtual / Onsite

Max. Capacity: 12

Learning Objectives

  • Gain hands-on knowledge and skills to deploy Cisco ISE with Cisco SD-Access
  • Gain leading-edge skills for high-demand job roles and responsibilities focused on enterprise security
  • Describe Cisco ISE policies and authentication and authorization process
  • Understand different AAA protocols
  • Understand how Cisco ISE fits into Cisco DNA
  • Center architecture
  • Provide configuration examples of Cisco ISE and
  • TrustSec solutions
  • Describe Cisco ISE integration with Cisco DNA Center and policy enforcement using Security Groups
  • Provide configuration examples for wired, wireless, and VPN network access
  • Understand how inline tagging and SGT Exchange Protocol (SXP) works


1: Introduction to ISE and Active Directory (AD) Integration
2: Configuring ISE AAA Policies
3: Configuring AAA Clients and Verifying AAA Operations
4: Configuring Wireless Guest Access (Optional)
5: Configuring VPN Access