Positioning ISE for SDA (PISE)

About this course:

Cisco Identity Services Engine (ISE) is a network-based Access Control and Policy Enforcement Platform that enables enterprises to enforce compliance, enhance infrastructure security, and streamline their service operations. The unique architecture of Cisco ISE allows enterprises to gather real-time contextual information from network devices (NADs), users and devices (Endpoints), the administrator can then use that information to make proactive governance decisions and enforce policies by tying identity to various network elements including access switches, wireless LAN controllers (WLCs), virtual private network (VPN) gateways, and data center switches. 

Cisco ISE is a key component of the Cisco Security Group Access Solution. In this 2-day pre-sales overview, we will discuss the key requirements customer have when looking for an Access Control System. We will discuss in depth the advantages the Cisco ISE solution offers such as full lifecycle Guest Access, Profiling and Visibility, and Px Grid. We will also focus on new features such as Cisco Software Defined Access and the integration with Cisco DNA Center. To help you sell the ISE Solution, we will setup and test the Quick Demo Solution available on dCloud. This helps you quickly setup and show the features of ISE with real-life equipment at your customer’s site. We will discuss the Cisco ISE roadmap and go through Product Sales and Ordering tools allowing you to intelligently discuss and order the solution your customer requires. Learn more about our Cisco ISE training course below. 

Course Objective:

Upon completing this course, the learner should be able to meet these overall objectives:

• Configure, customize, and demonstrate ISE to customers  
• Position the value proposition of ISE and how it fits into SD-Access 
• Explain the need for and configure MAB, 802.1X, and WebAuth 
• Discuss Visibility, Profiling, and Context from a network security perspective
• Explain and demonstrate Easy Connect & Secure Access for active/passive identity authorization of users/devices to the network
• Explain how Guest methods, flows, and customization options provide greater network security and management
• Evaluate BYOD options with single and dual SSIDs and understand the associated needs and challenges of customers
• Understand TrustSec and how it is used for role-based segmentation in ISE and SD-Access
• Discuss Third-Party Network Devices and how ISE can enforce secure access policies without Cisco infrastructure
• Begin to properly qualify and scope customer design and deployments
• Understand how to migrate to ISE and license ISE features 
• Understand the competitive landscape and how to best position ISE  
• Understand how and where customers can get help from the Cisco ISE team

Audience:

The primary audience for this course are as follows:

• System Engineers 
• Field Engineers 
• Professionals Specializing in Security or Enterprise Networks

Prerequisite:

The knowledge and skill that a learner should have before attending this course are as follows:

• Familiarity with Data Center Networks