Cisco
Implementing and Configuring Cisco Identity Services Engine (SISE)
تحكّم بمن يتصل بشبكتك وبما يتصل بها باستخدام Cisco ISE. تنشر ISE
5 أياممتوسط14 وحدةCisco CCNP Security
نظرة عامة
تحكّم بمن يتصل بشبكتك وبما يتصل بها باستخدام Cisco ISE. تنشر ISE، وتبني سياسات المصادقة والتفويض، وتقدّم وصول الضيوف وأجهزة الموظفين الشخصية، وتصنّف الأجهزة الطرفية، وتفرض امتثالها الأمني، وتقسّم الوصول باستخدام TrustSec.
ما ستتعلّمه
المحتوى التقني أدناه معروضٌ باللغة الإنجليزية كما ورد في منهاج الدورة، حفاظاً على دقّة المصطلحات.
- Describe the Cisco Identity Services Engine (ISE)
- Explain Cisco ISE deployment
- Describe Cisco ISE policy enforcement components
- Describe Cisco ISE policy configuration
- Troubleshoot Cisco ISE policy and third-party Network Access Device (NAD) support
- Configure guest access
- Configure hotspots and guest portals
- Describe the Cisco ISE profiler services
- Describe profiling best practices and reporting
- Configure a Cisco ISE BYOD solution
- Configure endpoint compliance
- Configure client posture services
- Configure Cisco ISE device administration
- Describe Cisco ISE TrustSec configurations
المنهاج
14 وحدة
- Understand the role of Cisco ISE in enterprise security
- Review core components and capabilities of the ISE platform
- Explore identity-based access control models and policy logic
- Plan and configure initial Cisco ISE deployment
- Navigate licensing options and scalability considerations
- Integrate ISE with existing network infrastructure
- Identify key elements involved in access policy enforcement
- Map out authentication, authorization, and accounting flows
- Understand the role of RADIUS, profiling, and posture in policy logic
- Create authentication and authorization policy sets
- Define rule conditions using identity, posture, and device data
- Streamline policy design using reusable objects and templates
- Use system logs and diagnostics to troubleshoot policy issues
- Resolve authentication failures and access denials
- Support and integrate non-Cisco network access devices
- Design guest access flows using self-registration and sponsorship
- Configure web authentication portals and captive portals
- Customize branding, login options, and user notifications
- Implement hotspot access with limited credentials
- Set up guest user onboarding workflows
- Monitor guest activity and configure expiration policies
- Identify devices using profiling probes and attributes
- Classify endpoints dynamically based on network behavior
- Use profiling policies to automate access decisions
- Optimize profiling configurations for accuracy
- Generate endpoint and profiling reports
- Monitor endpoint behavior trends and anomalies
- Enable onboarding for personal and unmanaged devices
- Define BYOD workflows including certificate provisioning
- Ensure secure access and policy enforcement for BYOD users
- Evaluate endpoint posture using predefined checks
- Integrate compliance posture with access decisions
- Remediate non-compliant devices automatically
- Set up posture agents and condition checks
- Enforce antivirus, firewall, and OS version compliance
- Apply policies based on client health status
- Connect and manage switches, wireless controllers, and VPNs
- Use ISE to control access at the network edge
- Validate NAD configurations and manage updates
- Understand TrustSec components and security group tags (SGTs)
- Configure scalable group access policies
- Segment network access using TrustSec for secure zones
لمن هذه الدورة
مهندسو الأمن والشبكات الساعون إلى CCNP Security.
قبل أن تبدأ
- Familiarity with the Cisco IOS® Software command-line interface (CLI)
- Familiarity with Cisco AnyConnect® Secure Mobility Client
- Familiarity with Microsoft Windows operating systems
- Familiarity with 802.1X
الشهادة التي تؤهّلك لها
دورات ذات صلة
المزيد في Cisco ←متوسط
Administering Cisco Unified Communications Manager (ACUCM)
Cisco
تفاصيل الدورة ←متوسط
Administering Cisco Webex AI Assistant & Agent (AWXAI)
Cisco
تفاصيل الدورة ←متوسط
Cisco Administering and Troubleshooting Meraki Full Stack (MX,MS,MR,MV,MI,SM,MT) Technologies (MER-FS-ADMIN)
Cisco
تفاصيل الدورة ←متوسط
Cisco Administering Cisco Data Center Unified Computing System with Intersight v6.0 (DCUCAI)
Cisco
تفاصيل الدورة ←متوسط
Cisco Administering Cisco Unified Communications Manager and Unity Connection v15 (ACUCM w/AUC)
Cisco
تفاصيل الدورة ←متوسط
Cisco Administering Webex Contact Center (AWXCC)
Cisco
تفاصيل الدورة ←لنرسم خطوتك التالية معاً.
أخبرنا بالدورة أو الشهادة التي تهمّك، ونرسل لك المنهاج والمواعيد القادمة والرسوم وخيارات التدريب الخاص لفريقك.