Implementing Cisco Secure Access Solutions (SISAS)

neXT LIVE 365

LEARN FOR 365 DAYS!

Sunset Learning Institute believes in a 365-day learning experience that begins immediately, regardless of when you attend your ILT course.  At SLI, you get a range of learning opportunities, from instructor-led hands-on training, to self-directed, customizable learning paths based on your environment, your needs, and your level of experience. We provide the tools and options, and you decide what you need, when you need it, and how you want to learn it!

Immediate access to supplemental learning assets that are INCLUDED with your purchase of the above instructor-led training course: 

  • 365 Days of Access to SLI’s Entire Cisco Security Video Reference Library (VRL), not just the 5-day class you sign up for (hundreds of searchable, on-demand learning bytes in 5-15-minute videos)
  • 365 Days of Unlimited Access to Delta Sessions - What’s Not Covered in Class! (Version Upgrades, Industry Updates, Etc.)
  • 365 Days of Unlimited 24x7 Access to SLI's Community - Collaborate with SLI Instructors and Other Members (Monitored Daily by SLI Instructors) See Community Demo
  • 365 Days of Unlimited Access to Interactive neXTpertise Sessions and other IT Resources with SLI Instructors (featured hot topics, exam prep, etc.)  See Upcoming neXTpertise Sessions
  • Unlimited Access to Hosted Webinars and All Previously Recorded Sessions
  • Unlimited Access to your Digital Courseware
See Entire Portfolio

Benefits:
  • Training that fits your needs (from high intensity to small learning bytes)
  • Build immediate competency - start at time of purchase!
  • Gain know-how and skills gaps with limited work disruptions
  • Get quick answers to daily challenges - live interaction!
Not interested in an Instructor led class - try our self-directed, digital only learning solutions!

Overview

All Scheduled Dates are Guaranteed to Run!

Implementing Cisco Secure Access Solutions (SISAS) v1.0 is a newly created five-day instructor-led training (vILT) course is part of the curriculum path leading to the Cisco Certified Network Professional Security (CCNP© Security) certification. Additionally, it is designed to prepare security engineers with the knowledge and hands-on experience so that they can deploy Cisco’s Identity Services Engine and 802.1X secure network access.
 
The goal of the course is to provide students with foundational knowledge and the capabilities to implement and managed network access security by utilizing Cisco ISE appliance product solution.
 
The student will gain hands-on experience with configuring various advance Cisco security solutions for mitigating outside threats and securing devices connecting to the network. At the end of the course, students will be able to reduce the risk to their IT infrastructures and applications using Cisco’s ISE appliance feature and provide operational support identity and network access control

If you are considering this course, you may also be interested in Implementing and Configuring Cisco Identity Services Engine (SISE). The content is very similar and we have dates for the SISE. 

Target Audience

The primary audience for this course is as follows:
  • Network Security Engineers

Prerequisites

To fully benefit from this course, students should have the following prerequisite skills and knowledge: 
  • Cisco Certified Network Associate (CCNA©_) certification
  • Cisco Certified Network Associate (CCNA©_) Security certification
  • Knowledge of Microsoft Windows operating system

Course Objectives

Upon completing this course, the learner will be able to meet these overall objectives:
  • Understand Cisco Identity Services Engine architecture and access control capabilities
  • Understand 802.1X architecture, implementation and operation
  • Understand commonly implemented Extensible Authentication Protocols (EAP)
  • Implement Public-Key Infrastructure with ISE
  • Understand the implement Internal and External authentication databases 
  • Implement MAC Authentication Bypass
  • Implement identity based authorization policies
  • Understand Cisco TrustSec features
  • Implement Web Authentication and Guest Access
  • Implement ISE Posture service
  • Implement ISE Profiling
  • Understand Bring Your Own Device (BYOD) with ISE
  • Troubleshoot ISE

Course Outline

Module and Lab Details Available in Full Course Outline

Module 1: Threat Mitigation Through Identity Services
  • Lesson 1: Identity Services
  • Lesson 2: 802.1X and EAP
  • Lesson 3: Identity System Quick Start
Module 2: Cisco Identity Services Engine (ISE) Fundamentals
  • Lesson 1: Cisco ISE Overview
  • Lesson 2: Cisco ISE with PKI
  • Lesson 3: Cisco ISE Authentication
  • Lesson 4: Configuring Cisco ISE for External Authentication
Module 3: Advanced Access Control
  • Lesson 1: Certificate-based User Authentication
  • Lesson 2: Authorization
  • Lesson 3: Security Group Access (SGA) and MACsec Implementation
Module 4: Web Authentication and Guest Access
  • Lesson 1: Describe the Cisco Email Security Solutions
  • Lesson 2: Guest Access Services
Module 5: Endpoint Access Control Enhancements
  • Lesson 1: Posture
  • Lesson 2: Profiler
  • Lesson 3: BYOD
Module 6: Troubleshooting Network Access Control
  • Lesson 1: Troubleshooting Network Access Control
 
Labs:
  • Lab 1-1: Bootstrap Identity System
  • Lab 2-1: Enroll Cisco ISE in PKI
  • Lab 2-2: Implement MAC Authentication Bypass (MAB) and Internal ISE Authentication
  • Lab 2-3: Implement External Authentication
  • Lab 3-1: Implementing EAP-TLS with Identity Services Engine (ISE)
  • Lab 3-2: Implementing Authorization
  • Lab 4-1: Configuring Cisco ASA Access Policy
  • Lab 4-2: Implement Guest Access
  • Lab 5-1: Implement Posture
  • Lab 5-2: Profiler
  • Lab 6-1: Troubleshooting Network Access Control (Optional)

SLI Main Menu