SISE (300-715)

0 (0 Ratings)

The Cisco 300-715 SISE exam certifies your expertise in implementing and managing Cisco Identity Services Engine (ISE) for secure network access. This 90-minute exam earns you the Cisco Certified Specialist – Security Identity Management Implementation certification, fulfills a CCNP Security concentration requirement, and supports recertification. It covers ISE architecture, policy enforcement, WebAuth, guest access, BYOD, endpoint compliance, and device administration—making it essential for identity and access control professionals.

No distractions. Just you!

Course Description

Key Takeaways

Describe the Cisco ISE: Cisco Identity Services Engine (ISE) is a centralized, policy-based access control system that enforces secure network access for users and devices using identity, posture, and profiling data.
Explain Cisco ISE Deployment: ISE can be deployed as a standalone or distributed system with roles such as Administration, Policy Service, and Monitoring distributed across multiple nodes. High availability is supported for redundancy.
Describe Cisco ISE Policy Enforcement Components: Key components include Policy Sets, Authentication and Authorization Policies, Profiling, Posture, and TrustSec, which together enforce who or what can access the network.
Describe Cisco ISE Policy Configuration: ISE policies are configured using a combination of identity sources, conditions, authentication protocols, and authorization rules to define access controls.
Troubleshoot Cisco ISE Policy and Third-party Network Access Device (NAD) Support: Use logs and reports in ISE to troubleshoot policy issues, verify compatibility with NADs, check RADIUS configuration, and validate shared secrets and access policies.
Configure Guest Access: Set up guest portals with self-registration, sponsor approval, or anonymous login. Redirect unauthenticated users to captive portals using redirect ACLs and assign appropriate access policies.
Configure Hotspots and Guest Portals: Configure simple hotspot portals for open access with terms and conditions, or more secure guest portals that require credentials or account approval.
Describe the Cisco ISE Profiler Services: The profiler service collects and analyzes network data using probes (e.g., DHCP, SNMP, RADIUS) to identify device types and assign them to endpoint groups.
Describe Profiling Best Practices and Reporting: Enable only necessary probes, monitor profiling results, adjust policies for accuracy, and use ISE reports to track endpoints and profiling effectiveness.
Configure a Cisco ISE BYOD Solution: Enable users to register their personal devices through the My Devices Portal, perform certificate provisioning, and enforce restricted access using BYOD policies.
Configure Endpoint Compliance: Define and enforce posture policies for antivirus status, firewall, patch levels, etc., and remediate or limit access for non-compliant endpoints.
Configure Client Posture Services: Integrate Cisco AnyConnect with ISE to collect posture data from endpoints and enforce policies based on compliance status.
Configure Cisco ISE Device Administration: Use ISE as a TACACS+ server to control administrator access to network devices, manage roles, and apply command-level authorization policies.
Describe Cisco ISE TrustSec Configurations: TrustSec uses Security Group Tags (SGTs) to classify traffic and enforce scalable, role-based access control policies across the network without relying on traditional IP-based ACLs.

Who should attend

Network Security Engineers
Network Security Architects
ISE Administrators
Senior Security Operations Center (SOC) Personnel responsible for Incidence Response
Cisco Integrators and Partners

Prerequisites

Familiarity with the Cisco IOS® Software Command-Line Interface (CLI) for wired and wireless devices
Familiarity with Cisco AnyConnect® Secure Mobility Client
Familiarity with Microsoft Windows operating systems
Familiarity with 802.1X

Course Outline

Section 1: Introducing Cisco ISE Architecture
Section 2: Introducing Cisco ISE Deployment
Section 3: Introducing Cisco ISE Policy Enforcement Components
Section 4: Introducing Cisco ISE Policy Configuration
Section 5: Troubleshooting Cisco ISE Policy and Third-Party NAD Support
Section 6: Introducing Web Authentication and Guest Services
Section 7: Configuring Hotspots and Guest Portals
Section 8: Introducing the Cisco ISE Profiler
Section 9: Introducing Profiling Best Practices and Reporting
Section 10: Configuring Cisco ISE BYOD
Section 11: Introducing Cisco ISE Endpoint Compliance Services
Section 12: Configuring Client Posture Services and Compliance
Section 13: Working with Network Access Devices
Section 14: Exploring Cisco TrustSec

Lab Outline

Discovery 1: Configure Initial Cisco ISE Configuration and System Certificate Usage
Discovery 2: Integrate Cisco ISE with Active Directory
Discovery 3: Configure Cisco ISE Policy for MAB
Discovery 4: Configure Cisco ISE Policy for 802.1X
Discovery 5: Configure Guest Access
Discovery 6: Configure Hotspot and Self-Registered Guest Access
Discovery 7: Configure Sponsor-Approved and Fully Sponsored Guest Access
Discovery 8: Create Guest Reports
Discovery 9: Configure Profiling
Discovery 10: Customize the Cisco ISE Profiling Configuration
Discovery 11: Create Cisco ISE Profiling Reports
Discovery 12: Configure BYOD
Discovery 13: Manage a Lost or Stolen BYOD Device
Discovery 14: Configure Cisco ISE Compliance Services
Discovery 15: Configure Client Provisioning
Discovery 16: Configure Posture Policies
Discovery 17: Test and Monitor Compliance-Based Access
Discovery 18: Configure Cisco ISE for Basic Device Administration
Discovery 19: Configure Cisco ISE Command Authorization
Discovery 20: Configure Cisco TrustSec