O público principal deste curso é composto por profissionais interessados na implantação do produto ISE em conjunto com a rede sem fio.

Após a conclusão deste curso, o aluno será capaz de atender a esses objetivos gerais:
• Descrever os fatores de negócios, arquitetura, componentes e fatores de escalabilidade relacionados à implantação típica do Cisco ISE;
• Provisionar acesso seguro à rede configurando a combinação de AAA e opções comuns de CoA (Change Of Authorization);
• Configurar o serviço denominado de Profiling, seus componentes, opções e utilizar as melhores práticas;
• Provisionar uma solução de acesso para usuário convidado (Guests) e as diferentes opções que estão disponíveis;
• Descrever e implantar uma solução BYOD, com foco na configuração usando um único SSID;
• Integrar Cisco ISE com uma solução de MDM parceira;
• Usar as ferramentas do Cisco ISE para reunir informações úteis relacionadas as tendências históricas de acesso e para solucionar problemas (suporte).

Os conhecimentos e habilidades que o aluno deve ter antes de participar deste curso são os seguintes:
• Os alunos já devem estar familiarizados com a configuração da Cisco WLC e AP;
• Conhecimentos de 802.1X;
• Desejável conhecimentos básicos em AD Microsoft ou LDAP;
• Conhecimentos básicos de redes (VLAN e Roteamento);
• Conhecimentos básicos em sistema operacional Windows.

Introducing Cisco ISE
• Describe the issues that corporations face in supporting new paradigms of network access and how Cisco ISE can ease these pressures and help resolve these issues
• Describe the Cisco ISE architecture and components
• Describe the different Cisco ISE nodes and personas
• Describe and compare the products that are used to run Cisco ISE
• Describe the different Cisco ISE deployment options
• Explain the Cisco ISE licensing options and considerations

Provisioning Secure Access
• Describe authentication services that are available to Cisco ISE
• Describe the process that Cisco ISE uses to validate credentials from different identity sources
• Configure authentication identity sources and policies
• Describe Cisco ISE authorization policies and their components
• Configure authorization components and policies
• Define and understand CoA and review common permission elements, including dACLs, named ACLs, VLANs, and SGT.

Configuring Profiling
• Describe the functions and purpose of profiling on the Cisco ISE platform
• List the profiler probes and discuss the attributes that are associated with these probes
• Describe and configure profiler policies
• Configure profiling on the Cisco ISE platform
• Verify profiling operation on the Cisco ISE platform
• List the best practices for configuring profiling on the Cisco ISE platform

Providing Guest Access
• Describe the concept of guest web access
• Configure the components of a CWA-based guest access solution including redirection for both wired and wireless access
• Describe guest accounts, roles, and data stores
• Define the functionality that is provided by the Cisco ISE portals that are used for guest access
• Configure support for guest reporting
• Discuss best practices as relates to Cisco ISE guest services

Implementing BYOD
• Define BYOD, explain the advantages of a Cisco BYOD solution, and describe BYOD components
• Describe common BYOD use cases and explain how they apply to various corporate security policy needs
• Describe BYOD deployment and configuration options
• Describe the BYOD flow and on-boarding process when a single SSID is used
• Implement an authentication policy for BYOD deployments
• Implement an authorization policy for BYOD deployments

Exploring MDM Integration
• Define the MDM integration process in Cisco ISE and add an MDM Server
• Define MDM supported attributes
• Examine an MDM configuration

Monitoring and Troubleshooting Cisco ISE Security Solutions
• Use the Cisco ISE dashboard
• Navigate Cisco ISE alarm and logging features to assist in diagnosing problems
• Use the Live Authentications log feature of Cisco ISE
• Use the Global Search and Session Trace features of Cisco ISE
• Use the TCP Dump feature of Cisco ISE
• Use the Evaluate Configuration Validator tool

LABS
• Lab 1: Basic Authentication and Authorization
• Lab 2: Configuring and Validating Cisco ISE Profiling
• Lab 3: Configuring Cisco ISE Guest Services
• Lab 4: BYOD On-Boarding using a Single SSID
• Lab 5: Testing On-Boarding
• Lab 6: Monitoring and Troubleshooting Cisco ISE (Optional)