-
This course shows you how to deploy and use Cisco® Identity Services Engine (ISE) v2.4, an identity and access control policy platform that simplifies the delivery of consistent, highly secure access control across wired, wireless, and VPN connections. This hands-on course provides you with the knowledge and skills to implement and use Cisco ISE, including policy enforcement, profiling services, web authentication and guest access services, BYOD, endpoint compliance services, and TACACS+ device administration. Through expert instruction and hands-on practice, you will learn how to use Cisco ISE to gain visibility into what is happening in your network, streamline security policy management, and contribute to operational efficiency.
-
Course Contents
-
- Introducing Cisco ISE Architecture and Deployment
- Cisco ISE Policy Enforcement
- Web Authentication and Guest Services
- Cisco ISE Profiler
- Cisco ISE BYOD
- Cisco ISE Endpoint Compliance Services
- Working with Network Access Devices
You will receive the original course documentation from Cisco in English language as a Cisco E-Book. In the Cisco Digital Learning Version, the content of the courseware is integrated into the learning interface instead.
-
Target Group
-
- Network Security Engineers
- ISE Administrators
- Wireless Network Security Engineers
- Cisco Integrators and Partners
-
Knowledge Prerequisites
-
To fully benefit from this course, you should have the following knowledge:
- Familiarity with the Cisco IOS® Software Command-Line Interface (CLI)
- Familiarity with Cisco AnyConnect® Secure Mobility Client
- Familiarity with Microsoft Windows operating systems
- Familiarity with 802.1X
-
Complementary and Continuative Courses
-
SCOR – Implementing and Operating Cisco Security Core Technologies
SFWIPF – Fundamentals of Cisco Firewall Threat Defense and Intrusion Prevention
SESA – Securing Email with Cisco Email Security Appliance
SWSA – Securing the Web with Cisco Web Security Appliance
SVPN – Implementing Secure Solutions with Virtual Private Networks
SAUI – Implementing Automation for Cisco Security Solutions
SFWIPA – Advanced Techniques for Cisco Firewall Threat Defense and Intrusion Prevention
SCAZT – Designing and Implementing Secure Cloud Access for Users and Endpoints -
Course Objective
-
This course helps you prepare to take the exam, Implementing and Configuring Cisco Identity Services Engine (300-715 SISE), which leads to CCNP® Security and the Cisco Certified Specialist - Security Identity Management Implementation certifications.
Introducing Cisco ISE Architecture and Deployment |
Using Cisco ISE as a Network Access Policy Engine |
Cisco ISE Use Cases |
Describing Cisco ISE Functions |
Cisco ISE Deployment Models |
Context Visibility |
Cisco ISE Policy Enforcement |
Using 802.1X for Wired and Wireless Access |
Using MAC Authentication Bypass for Wired and Wireless Access |
Introducing Identity Management |
Configuring Certificate Services |
Introducing Cisco ISE Policy |
Implementing Third-Party Network Access Device Support |
Introducing Cisco TrustSec |
Cisco TrustSec Configuration |
Easy Connect |
Web Authentication and Guest Services |
Introducing Web Access with Cisco ISE |
Introducing Guest Access Components |
Configuring Guest Access Settings |
Configuring Sponsor and Guest Portals |
Cisco ISE Profiler |
Introducing Cisco ISE Profiler |
Profiling Deployment and Best Practices |
Cisco ISE BYOD |
Introducing the Cisco ISE BYOD Process |
Describing BYOD Flow |
Configuring the My Devices Portal |
Configuring Certificates in BYOD Scenarios |
Cisco ISE Endpoint Compliance Services |
Introducing Endpoint Compliance Services |
Configuring Client Posture Services and Provisioning in Cisco ISE |
Working with Network Access Devices |
Review TACACS+ |
Cisco ISE TACACS+ Device Administration |
Configure TACACS+ Device Administration |
TACACS+ Device Administration Guidelines and Best Practices |
Migrating from Cisco ACS to Cisco ISE |
Lab outline |
Access the SISE Lab and Install ISE 2.4 |
Configure Initial Cisco ISE Setup, GUI Familiarization, and System Certificate Usage |
Integrate Cisco ISE with Active Directory |
Configure Basic Policy on Cisco ISE |
Configure Policy Sets |
Configure Access Policy for Easy Connect |
Configure Guest Access |
Configure Guest Access Operations |
Create Guest Reports |
Configure Profiling |
Customize the Cisco ISE Profiling Configuration |
Create Cisco ISE Profiling Reports |
Configure BYOD |
Blacklisting a Device |
Configure Cisco ISE Compliance Services |
Configure Client Provisioning |
Configure Posture Policies |
Test and Monitor Compliance-Based Access |
Test Compliance Policy |
Configure Cisco ISE for Basic Device Administration |
Configure TACACS+ Command Authorization |

Certification as CCNP Security Certification
-
Classroom training
- Do you prefer the classic training method? A course in one of our Training Centers, with a competent trainer and the direct exchange between all course participants? Then you should book one of our classroom training dates!
-
Hybrid training
- Hybrid training means that online participants can additionally attend a classroom course. The dynamics of a real seminar are maintained, and the online participants are able to benefit from that. Online participants of a hybrid course use a collaboration platform, such as WebEx Training Center or Saba Meeting. To do this, a PC with browser and Internet access is required, as well as a headset and ideally a Web cam. In the seminar room, we use specially developed and customized audio- and video-technologies. This makes sure that the communication between all persons involved works in a convenient and fault-free way.
-
Online training
- You wish to attend a course in online mode? We offer you online course dates for this course topic. To attend these seminars, you need to have a PC with Internet access (minimum data rate 1Mbps), a headset when working via VoIP and optionally a camera. For further information and technical recommendations, please refer to.
-
Cisco Digital Learning
- This course is available in the Cisco Digital Learning Library. These recently developed, multi-modal training events include HD videos moderated by lecturers with stored searchable text and subtitles, as well as a exercises, labs, and explanatory text and graphics. We provide this offer to you via our myExperTeach learning portal. Effective of the activation of the account, access to the courses will be granted for a duration of 6 months. In the case of packet solutions (Cisco Digital Learning Subscriptions), this time period will amount to 12 months.
-
Tailor-made courses
-
You need a special course for your team? In addition to our standard offer, we will also support you in creating your customized courses, which precisely meet your individual demands. We will be glad to consult you and create an individual offer for you.

-
This course shows you how to deploy and use Cisco® Identity Services Engine (ISE) v2.4, an identity and access control policy platform that simplifies the delivery of consistent, highly secure access control across wired, wireless, and VPN connections. This hands-on course provides you with the knowledge and skills to implement and use Cisco ISE, including policy enforcement, profiling services, web authentication and guest access services, BYOD, endpoint compliance services, and TACACS+ device administration. Through expert instruction and hands-on practice, you will learn how to use Cisco ISE to gain visibility into what is happening in your network, streamline security policy management, and contribute to operational efficiency.
-
Course Contents
-
- Introducing Cisco ISE Architecture and Deployment
- Cisco ISE Policy Enforcement
- Web Authentication and Guest Services
- Cisco ISE Profiler
- Cisco ISE BYOD
- Cisco ISE Endpoint Compliance Services
- Working with Network Access Devices
You will receive the original course documentation from Cisco in English language as a Cisco E-Book. In the Cisco Digital Learning Version, the content of the courseware is integrated into the learning interface instead.
-
Target Group
-
- Network Security Engineers
- ISE Administrators
- Wireless Network Security Engineers
- Cisco Integrators and Partners
-
Knowledge Prerequisites
-
To fully benefit from this course, you should have the following knowledge:
- Familiarity with the Cisco IOS® Software Command-Line Interface (CLI)
- Familiarity with Cisco AnyConnect® Secure Mobility Client
- Familiarity with Microsoft Windows operating systems
- Familiarity with 802.1X
-
Complementary and Continuative Courses
-
SCOR – Implementing and Operating Cisco Security Core Technologies
SFWIPF – Fundamentals of Cisco Firewall Threat Defense and Intrusion Prevention
SESA – Securing Email with Cisco Email Security Appliance
SWSA – Securing the Web with Cisco Web Security Appliance
SVPN – Implementing Secure Solutions with Virtual Private Networks
SAUI – Implementing Automation for Cisco Security Solutions
SFWIPA – Advanced Techniques for Cisco Firewall Threat Defense and Intrusion Prevention
SCAZT – Designing and Implementing Secure Cloud Access for Users and Endpoints -
Course Objective
-
This course helps you prepare to take the exam, Implementing and Configuring Cisco Identity Services Engine (300-715 SISE), which leads to CCNP® Security and the Cisco Certified Specialist - Security Identity Management Implementation certifications.
Introducing Cisco ISE Architecture and Deployment |
Using Cisco ISE as a Network Access Policy Engine |
Cisco ISE Use Cases |
Describing Cisco ISE Functions |
Cisco ISE Deployment Models |
Context Visibility |
Cisco ISE Policy Enforcement |
Using 802.1X for Wired and Wireless Access |
Using MAC Authentication Bypass for Wired and Wireless Access |
Introducing Identity Management |
Configuring Certificate Services |
Introducing Cisco ISE Policy |
Implementing Third-Party Network Access Device Support |
Introducing Cisco TrustSec |
Cisco TrustSec Configuration |
Easy Connect |
Web Authentication and Guest Services |
Introducing Web Access with Cisco ISE |
Introducing Guest Access Components |
Configuring Guest Access Settings |
Configuring Sponsor and Guest Portals |
Cisco ISE Profiler |
Introducing Cisco ISE Profiler |
Profiling Deployment and Best Practices |
Cisco ISE BYOD |
Introducing the Cisco ISE BYOD Process |
Describing BYOD Flow |
Configuring the My Devices Portal |
Configuring Certificates in BYOD Scenarios |
Cisco ISE Endpoint Compliance Services |
Introducing Endpoint Compliance Services |
Configuring Client Posture Services and Provisioning in Cisco ISE |
Working with Network Access Devices |
Review TACACS+ |
Cisco ISE TACACS+ Device Administration |
Configure TACACS+ Device Administration |
TACACS+ Device Administration Guidelines and Best Practices |
Migrating from Cisco ACS to Cisco ISE |
Lab outline |
Access the SISE Lab and Install ISE 2.4 |
Configure Initial Cisco ISE Setup, GUI Familiarization, and System Certificate Usage |
Integrate Cisco ISE with Active Directory |
Configure Basic Policy on Cisco ISE |
Configure Policy Sets |
Configure Access Policy for Easy Connect |
Configure Guest Access |
Configure Guest Access Operations |
Create Guest Reports |
Configure Profiling |
Customize the Cisco ISE Profiling Configuration |
Create Cisco ISE Profiling Reports |
Configure BYOD |
Blacklisting a Device |
Configure Cisco ISE Compliance Services |
Configure Client Provisioning |
Configure Posture Policies |
Test and Monitor Compliance-Based Access |
Test Compliance Policy |
Configure Cisco ISE for Basic Device Administration |
Configure TACACS+ Command Authorization |

Certification as CCNP Security Certification
-
Classroom training
- Do you prefer the classic training method? A course in one of our Training Centers, with a competent trainer and the direct exchange between all course participants? Then you should book one of our classroom training dates!
-
Hybrid training
- Hybrid training means that online participants can additionally attend a classroom course. The dynamics of a real seminar are maintained, and the online participants are able to benefit from that. Online participants of a hybrid course use a collaboration platform, such as WebEx Training Center or Saba Meeting. To do this, a PC with browser and Internet access is required, as well as a headset and ideally a Web cam. In the seminar room, we use specially developed and customized audio- and video-technologies. This makes sure that the communication between all persons involved works in a convenient and fault-free way.
-
Online training
- You wish to attend a course in online mode? We offer you online course dates for this course topic. To attend these seminars, you need to have a PC with Internet access (minimum data rate 1Mbps), a headset when working via VoIP and optionally a camera. For further information and technical recommendations, please refer to.
-
Cisco Digital Learning
- This course is available in the Cisco Digital Learning Library. These recently developed, multi-modal training events include HD videos moderated by lecturers with stored searchable text and subtitles, as well as a exercises, labs, and explanatory text and graphics. We provide this offer to you via our myExperTeach learning portal. Effective of the activation of the account, access to the courses will be granted for a duration of 6 months. In the case of packet solutions (Cisco Digital Learning Subscriptions), this time period will amount to 12 months.
-
Tailor-made courses
-
You need a special course for your team? In addition to our standard offer, we will also support you in creating your customized courses, which precisely meet your individual demands. We will be glad to consult you and create an individual offer for you.
