Cisco Implementing and Configuring Cisco Identity Services Engine (SISE)

This accelerated course for Implementing and Configuring Cisco Identity Services Engine (SISE) teaches you to design, implement, and operate a Cisco ISE deployment that meets modern enterprise requirements for identity, security, visibility, and access control.

The curriculum will take you through the core architecture, network access control, identity stores, policy design, and day-to-day operations.

You will learn how to configure authentication and authorization policies, create scalable guest onboarding workflows, integrate network devices, and apply identity-based access decisions across wired and wireless environments. The curriculum also covers endpoint profiling, posture assessment, Terminal Access Controller Access Control Server (TACACS+) device administration, advanced administration practices, and more.

This course contains several labs that help you develop the practical experience you need to handle Cisco ISE personas, certificate-based authentication, TEAP (EAP Chaining), Bring Your Own Device (BYOD) onboarding, device profiling, and a wide range of use cases.

At Firebrand, we are proud to be an official Cisco Learning Partner. By studying with us, you’ll access official courseware, learn from certified Cisco instructors, and test your skills with 24/7 lab access.

This accelerated course prepares you to take the official 300-715 SISE exam and, upon passing, achieve the Cisco Certified Specialist – Security Identity Management Implementation certification. This certification satisfies the concentration exam requirement for the Cisco Certified Network Professional (CCNP) Security certification. 

The cost of the exam is included in your course fees.

Course Outline

• Cisco ISE Evolution, Foundation, and Role
• Architecture and Design
• Cisco ISE Installation and Initial Config
• 802.1X in Cisco ISE
• MAB in Cisco ISE
• Network Device Integration with Cisco ISE
• Identity Sources and Authentication Types
• Active Directory and LDAP Integration
• Identity Selection and Resolution Logic
• Cisco ISE Policy Framework
• Authentication Policies
• Authorization Policies
• Troubleshoot Policies and Sessions
• Guest Access Overview
• Guest Access Policies and Settings
• Guest Portals and Lifecycle Operations
• Sponsor Portals
• BYOD Architecture and Use Cases
• BYOD Onboarding with Native Supplicant Provisioning
• BYOD Lifecycle Operations
• Profiling Architecture and Capabilities
• Probes and Data Collection
• Profile Policies and Authorization
• Profile Monitoring and Design
• Posture Service Flow and Agents
• Posture Updates and Client Provisioning
• Posture Policies and Compliance-Based Access
• Posture Testing and Monitoring
• AAA and TACACS+
• TACACS+ Device Administration
• TACACS+ Command Authorization
• Cisco TrustSec Overview
• Cisco TrustSec in Cisco ISE
• Cisco ISE Administration

Lab Outline

• Explore the Initial Cisco ISE Configuration, GUI and System Certificate
• Configure Network Device Groups and Network Devices
• Integrate Cisco ISE with Active Directory
• Configure MAB
• Configure Wired 802.1X
• Configure Wireless 802.1X and Optional Wired EAP-TLS and TEAP
• Troubleshoot Cisco ISE 8021.X Configuration Errors
• Configure Hotspot Guest Access
• Configure Sponsored Guest Access
• Configure BYOD
• Manage BYOD Devices
• Configure Profiling
• Configure Authorization Policy Rules and Run Profiler Reports
• Configure Posture Preparations and Client Provisioning
• Configure Posturing and Reporting
• Configure TACACS+ Basic Device Administration
• Configure TACACS+ Command Authorization
• Configure Cisco TrustSec
• Configure Secure Syslog with TLS v1.3 and Install Cisco ISE Patch 

There are no prerequisites to attend this accelerated course. However, it is recommended that you are familiar with:

• The Cisco IOS® Software Command-Line Interface (CLI) for wired and wireless network devices
• Cisco Secure Client
• Microsoft Windows operating systems
• 802.1X

This accelerated course helps you prepare for the official 300-715 SISE exam. Upon passing this exam, you will achieve the Cisco Certified Specialist – Security Identity Management Implementation certification and satisfy the concentration exam requirement for the Cisco Certified Network Professional (CCNP) Security certification. The cost of the exam is included in the course fee.

• Exam name: Implementing and Configuring Cisco Identity Services Engine
• Exam code: 300-715 SISE
• Duration: 90 minutes
• Domains*:
  • Architecture and Deployment
  • Policy Enforcement
  • Web Auth and Guest Services
  • Profiler
  • BYOD
  • Endpoint Compliance
  • Network Access Device Administration

*These domains are general guidelines for the content likely to be included in the exam. As Cisco continues to develop this certification, other related topics may also appear.