Implementing and Configuring Cisco Identity Services Engine

Course Description

This event is focused specifically on the Cisco Identity Services Engine (ISE), an identity and access control policy platform that provides a single policy plane across the entire organization, combining multiple services, including authentication, authorization, and accounting (AAA), posture, profiling, device on-boarding, and guest management, into a single context-aware identity-based platform. The goal is to provide learners with the knowledge and skills to enforce security posture compliance for wired and wireless endpoints and enhance infrastructure security using the Cisco ISE.
This course is an intensive hands-on experience. With enhanced hands-on labs, you will cover the Cisco ISE version 2.4 (labs). You will learn how to perform a fundamental installation of ISE and how to configure identity-based networks using 802.1X for both wired and wireless clients, using Windows 8 and Apple iPad endpoints. You will also learn to use many of the new features, including AnyConnect 4.1 Posture Module for LAN and VPN posture compliance, EAP-FAST, PEAP, BYOD, and EAP Chaining. You’ll also see how the new Virtual Wireless Controller (vWLC) works to integrate with ISE along with advanced features within ISE.

Who Should Attend

Individuals involved in the deployment and maintenance of the Cisco ISE platform

Course Information

Length: 5 day

Format: Lecture and Lab

Delivery Method: Virtual / Onsite

Max. Capacity: 16

Learning Objectives

  • Describe Cisco ISE architecture, installation, and distributed deployment options 
  • Configure Network Access Devices (NADs), policy components and basic authentication and authorization policies in Cisco ISE
  • Implement Cisco ISE web authentication and guest services
  • Deploy Cisco ISE profiling, posture and client provisioning services
  • Describe administration, monitoring, troubleshooting, and TrustSec SGA security
  • Configure device administration using TACACS+ in Cisco ISE



  1. Access the SISE Lab and Install ISE 2.4
  2. Configure Initial Cisco ISE Setup, GUI Familiarization, and System Certificate Usage
  3. Integrate Cisco ISE with Active Directory
  4. Configure Basic Policy on Cisco ISE
  5. Configure Policy Sets
  6. Configure Access Policy for Easy Connect
  7. Configure Guest Access
  8. Configure Guest Access Operations
  9. Create Guest Reports
  10. Configure Profiling
  11. Customize the Cisco ISE Profiling Configuration
  12. Create Cisco ISE Profiling Reports
  13. Configure BYOD
  14. Blacklisting a Device
  15. Configure Cisco ISE Compliance Services
  16. Configure Client Provisioning
  17. Configure Posture Policies
  18. Test and Monitor Compliance-Based Access
  19. Test Compliance Policy
  20. Configure Cisco ISE for Basic Device Administration
  21. Configure TACACS+ Command Authorization

Nov 18, 2019 WebEx - Central Time Zone 5 DAY COURSE