-
This hands-on course provides you with the knowledge and skills to implement and apply Cisco ISE features to support use cases for a secure Zero Trust structure. These use cases include tasks such as policy enforcement, profiling services, web authentication and guest access services, BYOD, endpoint compliance services, and Terminal Access Controller Access Control Server (TACACS+) device management. Through hands-on lab exercises, you will learn how to use Cisco ISE to gain visibility into what is happening on your network, optimize security policy management, and increase operational efficiency.
-
Course Contents
-
- Introducing Cisco ISE Architecture
- Introducing Cisco ISE Deployment
- Introducing Cisco ISE Policy Enforcement Components
- Introducing Cisco ISE Policy Configuration
- Troubleshooting Cisco ISE Policy and Third-Party NAD Support
- Introducing Web Authentication and Guest Services
- Configuring Hotspots and Guest Portals
- Introducing the Cisco ISE Profiler
- Introducing Profiling Best Practices and Reporting
- Configuring Cisco ISE BYOD
- Introducing Cisco ISE Endpoint Compliance Services
- Configuring Client Posture Services and Compliance
- Working With Network Access Devices
- Exploring Cisco TrustSec
You will receive the original course documentation from Cisco in English language as a Cisco E-Book. In the Cisco Digital Learning Version, the content of the courseware is integrated into the learning interface instead.
-
Target Group
-
- Network Security engineers
- Network Security Architects
- ISE Administrators
- Senior Security Operations Center (SOC) personnel responsible for incident response
- Cisco Integrators and Partners
-
Knowledge Prerequisites
-
You should have the following prior knowledge:
- Familiarity with Cisco IOS® Software Command-Line Interface (CLI) for networked and wireless devices
- Knowledge of how to use the Cisco AnyConnect® Secure Mobility Client
- Knowledge of working with Microsoft Windows operating systems
- Knowledge of 802.1X
Recommended Cisco courses that will help you fulfill these requirements:
-
Complementary and Continuative Courses
-
SCOR – Implementing and Operating Cisco Security Core Technologies
SFWIPF – Fundamentals of Cisco Firewall Threat Defense and Intrusion Prevention
SESA – Securing Email with Cisco Email Security Appliance
SWSA – Securing the Web with Cisco Web Security Appliance
SVPN – Implementing Secure Solutions with Virtual Private Networks
SAUI – Implementing Automation for Cisco Security Solutions
SFWIPA – Advanced Techniques for Cisco Firewall Threat Defense and Intrusion Prevention
SCAZT – Designing and Implementing Secure Cloud Access for Users and Endpoints -
Course Objective
-
This course prepares you for the Implementing and Configuring Cisco Identity Services Engine exam within the CCNP® Security certification and also for the Cisco Certified Specialist - Security Identity Management Implementation.
Introducing Cisco ISE Architecture and Deployment |
Using Cisco ISE as a Network Access Policy Engine |
Cisco ISE Use Cases |
Describing Cisco ISE Functions |
Cisco ISE Deployment Models |
Context Visibility |
Cisco ISE Policy Enforcement |
Using 802.1X for Wired and Wireless Access |
Using MAC Authentication Bypass for Wired and Wireless Access |
Introducing Identity Management |
Configuring Certificate Services |
Introducing Cisco ISE Policy |
Implementing Third-Party Network Access Device Support |
Introducing Cisco TrustSec |
Cisco TrustSec Configuration |
Easy Connect |
Web Authentication and Guest Services |
Introducing Web Access with Cisco ISE |
Introducing Guest Access Components |
Configuring Guest Access Settings |
Configuring Sponsor and Guest Portals |
Cisco ISE Profiler |
Introducing Cisco ISE Profiler |
Profiling Deployment and Best Practices |
Cisco ISE BYOD |
Introducing the Cisco ISE BYOD Process |
Describing BYOD Flow |
Configuring the My Devices Portal |
Configuring Certificates in BYOD Scenarios |
Cisco ISE Endpoint Compliance Services |
Introducing Endpoint Compliance Services |
Configuring Client Posture Services and Provisioning in Cisco ISE |
Working with Network Access Devices |
Review TACACS+ |
Cisco ISE TACACS+ Device Administration |
Configure TACACS+ Device Administration |
TACACS+ Device Administration Guidelines and Best Practices |
Migrating from Cisco ACS to Cisco ISE |
Lab outline |
Access the SISE Lab and Install ISE 2.4 |
Configure Initial Cisco ISE Setup, GUI Familiarization, and System Certificate Usage |
Integrate Cisco ISE with Active Directory |
Configure Basic Policy on Cisco ISE |
Configure Policy Sets |
Configure Access Policy for Easy Connect |
Configure Guest Access |
Configure Guest Access Operations |
Create Guest Reports |
Configure Profiling |
Customize the Cisco ISE Profiling Configuration |
Create Cisco ISE Profiling Reports |
Configure BYOD |
Blacklisting a Device |
Configure Cisco ISE Compliance Services |
Configure Client Provisioning |
Configure Posture Policies |
Test and Monitor Compliance-Based Access |
Test Compliance Policy |
Configure Cisco ISE for Basic Device Administration |
Configure TACACS+ Command Authorization |

Certification as CCNP Security Certification
-
Classroom training
- Do you prefer the classic training method? A course in one of our Training Centers, with a competent trainer and the direct exchange between all course participants? Then you should book one of our classroom training dates!
-
Hybrid training
- Hybrid training means that online participants can additionally attend a classroom course. The dynamics of a real seminar are maintained, and the online participants are able to benefit from that. Online participants of a hybrid course use a collaboration platform, such as WebEx Training Center or Saba Meeting. To do this, a PC with browser and Internet access is required, as well as a headset and ideally a Web cam. In the seminar room, we use specially developed and customized audio- and video-technologies. This makes sure that the communication between all persons involved works in a convenient and fault-free way.
-
Online training
- You wish to attend a course in online mode? We offer you online course dates for this course topic. To attend these seminars, you need to have a PC with Internet access (minimum data rate 1Mbps), a headset when working via VoIP and optionally a camera. For further information and technical recommendations, please refer to.
-
Cisco Digital Learning
- This course is available in the Cisco Digital Learning Library. These recently developed, multi-modal training events include HD videos moderated by lecturers with stored searchable text and subtitles, as well as a exercises, labs, and explanatory text and graphics. We provide this offer to you via our myExperTeach learning portal. Effective of the activation of the account, access to the courses will be granted for a duration of 6 months. In the case of packet solutions (Cisco Digital Learning Subscriptions), this time period will amount to 12 months.
-
Tailor-made courses
-
You need a special course for your team? In addition to our standard offer, we will also support you in creating your customized courses, which precisely meet your individual demands. We will be glad to consult you and create an individual offer for you.

-
This hands-on course provides you with the knowledge and skills to implement and apply Cisco ISE features to support use cases for a secure Zero Trust structure. These use cases include tasks such as policy enforcement, profiling services, web authentication and guest access services, BYOD, endpoint compliance services, and Terminal Access Controller Access Control Server (TACACS+) device management. Through hands-on lab exercises, you will learn how to use Cisco ISE to gain visibility into what is happening on your network, optimize security policy management, and increase operational efficiency.
-
Course Contents
-
- Introducing Cisco ISE Architecture
- Introducing Cisco ISE Deployment
- Introducing Cisco ISE Policy Enforcement Components
- Introducing Cisco ISE Policy Configuration
- Troubleshooting Cisco ISE Policy and Third-Party NAD Support
- Introducing Web Authentication and Guest Services
- Configuring Hotspots and Guest Portals
- Introducing the Cisco ISE Profiler
- Introducing Profiling Best Practices and Reporting
- Configuring Cisco ISE BYOD
- Introducing Cisco ISE Endpoint Compliance Services
- Configuring Client Posture Services and Compliance
- Working With Network Access Devices
- Exploring Cisco TrustSec
You will receive the original course documentation from Cisco in English language as a Cisco E-Book. In the Cisco Digital Learning Version, the content of the courseware is integrated into the learning interface instead.
-
Target Group
-
- Network Security engineers
- Network Security Architects
- ISE Administrators
- Senior Security Operations Center (SOC) personnel responsible for incident response
- Cisco Integrators and Partners
-
Knowledge Prerequisites
-
You should have the following prior knowledge:
- Familiarity with Cisco IOS® Software Command-Line Interface (CLI) for networked and wireless devices
- Knowledge of how to use the Cisco AnyConnect® Secure Mobility Client
- Knowledge of working with Microsoft Windows operating systems
- Knowledge of 802.1X
Recommended Cisco courses that will help you fulfill these requirements:
-
Complementary and Continuative Courses
-
SCOR – Implementing and Operating Cisco Security Core Technologies
SFWIPF – Fundamentals of Cisco Firewall Threat Defense and Intrusion Prevention
SESA – Securing Email with Cisco Email Security Appliance
SWSA – Securing the Web with Cisco Web Security Appliance
SVPN – Implementing Secure Solutions with Virtual Private Networks
SAUI – Implementing Automation for Cisco Security Solutions
SFWIPA – Advanced Techniques for Cisco Firewall Threat Defense and Intrusion Prevention
SCAZT – Designing and Implementing Secure Cloud Access for Users and Endpoints -
Course Objective
-
This course prepares you for the Implementing and Configuring Cisco Identity Services Engine exam within the CCNP® Security certification and also for the Cisco Certified Specialist - Security Identity Management Implementation.
Introducing Cisco ISE Architecture and Deployment |
Using Cisco ISE as a Network Access Policy Engine |
Cisco ISE Use Cases |
Describing Cisco ISE Functions |
Cisco ISE Deployment Models |
Context Visibility |
Cisco ISE Policy Enforcement |
Using 802.1X for Wired and Wireless Access |
Using MAC Authentication Bypass for Wired and Wireless Access |
Introducing Identity Management |
Configuring Certificate Services |
Introducing Cisco ISE Policy |
Implementing Third-Party Network Access Device Support |
Introducing Cisco TrustSec |
Cisco TrustSec Configuration |
Easy Connect |
Web Authentication and Guest Services |
Introducing Web Access with Cisco ISE |
Introducing Guest Access Components |
Configuring Guest Access Settings |
Configuring Sponsor and Guest Portals |
Cisco ISE Profiler |
Introducing Cisco ISE Profiler |
Profiling Deployment and Best Practices |
Cisco ISE BYOD |
Introducing the Cisco ISE BYOD Process |
Describing BYOD Flow |
Configuring the My Devices Portal |
Configuring Certificates in BYOD Scenarios |
Cisco ISE Endpoint Compliance Services |
Introducing Endpoint Compliance Services |
Configuring Client Posture Services and Provisioning in Cisco ISE |
Working with Network Access Devices |
Review TACACS+ |
Cisco ISE TACACS+ Device Administration |
Configure TACACS+ Device Administration |
TACACS+ Device Administration Guidelines and Best Practices |
Migrating from Cisco ACS to Cisco ISE |
Lab outline |
Access the SISE Lab and Install ISE 2.4 |
Configure Initial Cisco ISE Setup, GUI Familiarization, and System Certificate Usage |
Integrate Cisco ISE with Active Directory |
Configure Basic Policy on Cisco ISE |
Configure Policy Sets |
Configure Access Policy for Easy Connect |
Configure Guest Access |
Configure Guest Access Operations |
Create Guest Reports |
Configure Profiling |
Customize the Cisco ISE Profiling Configuration |
Create Cisco ISE Profiling Reports |
Configure BYOD |
Blacklisting a Device |
Configure Cisco ISE Compliance Services |
Configure Client Provisioning |
Configure Posture Policies |
Test and Monitor Compliance-Based Access |
Test Compliance Policy |
Configure Cisco ISE for Basic Device Administration |
Configure TACACS+ Command Authorization |

Certification as CCNP Security Certification
-
Classroom training
- Do you prefer the classic training method? A course in one of our Training Centers, with a competent trainer and the direct exchange between all course participants? Then you should book one of our classroom training dates!
-
Hybrid training
- Hybrid training means that online participants can additionally attend a classroom course. The dynamics of a real seminar are maintained, and the online participants are able to benefit from that. Online participants of a hybrid course use a collaboration platform, such as WebEx Training Center or Saba Meeting. To do this, a PC with browser and Internet access is required, as well as a headset and ideally a Web cam. In the seminar room, we use specially developed and customized audio- and video-technologies. This makes sure that the communication between all persons involved works in a convenient and fault-free way.
-
Online training
- You wish to attend a course in online mode? We offer you online course dates for this course topic. To attend these seminars, you need to have a PC with Internet access (minimum data rate 1Mbps), a headset when working via VoIP and optionally a camera. For further information and technical recommendations, please refer to.
-
Cisco Digital Learning
- This course is available in the Cisco Digital Learning Library. These recently developed, multi-modal training events include HD videos moderated by lecturers with stored searchable text and subtitles, as well as a exercises, labs, and explanatory text and graphics. We provide this offer to you via our myExperTeach learning portal. Effective of the activation of the account, access to the courses will be granted for a duration of 6 months. In the case of packet solutions (Cisco Digital Learning Subscriptions), this time period will amount to 12 months.
-
Tailor-made courses
-
You need a special course for your team? In addition to our standard offer, we will also support you in creating your customized courses, which precisely meet your individual demands. We will be glad to consult you and create an individual offer for you.
