Description
Course info
Level
Intermediate
Updated
May 23, 2017
Duration
1h 50m
Description

Knowing what the posture of devices connecting to the network is a daunting task, especially when there are so many different types of devices. In this course, ISE Posture Services for CCNP Security (300-208) SISAS, you'll learn how to use Cisco ISE to posture clients as they come on to the network and control the type of access they gain. First, you'll explore the components of posture services. Next, you'll discover how to setup ISE to support posture services. Finally, you'll configure ISE to posture devices and control access. When you're finished with this course, you'll know how to implement posture services in an enterprise network.

About the author
About the author

Brandon is a CCIE (Security, #23837), Cisco Press author, and has over 13 years experience as a Cisco Instructor.

More from the author
VPN Fundamentals for CCNP® Security
Intermediate
1h 52m
12 Feb 2018
ISE BYOD for CCNP Security (300-208) SISAS
Intermediate
2h 8m
8 Nov 2017
More courses by Brandon Carroll
Section Introduction Transcripts
Section Introduction Transcripts

Course Overview
Hi there everyone. My name is Brandon Carroll, and welcome to my course, ISE Posture Services for CCNP Security (300-208) SISAS. I'm a Network Security Consultant and Course Developer at Global Config Technology Solutions, and over the past few years I've implemented Cisco ISE for several enterprise customers and each customer has similar needs and requirements. The Cisco SISAS exam tests your knowledge on the most common configurations that I've seen in these production environments. In this course, we're going to begin by learning about the components of posture services. Then, we're going to get into the configuration of each required element to get the solution up and running. Some of the major topics that we'll cover include how to configure a client provisioning policy; how to define the posture policy of our organization; how to posture a client and remediate, if necessary; how to handle non-corporate assets using the Cisco NAC Web Agent. By the end of this course, you'll know how to implement Cisco ISE posture services using Cisco ISE. Before beginning the course, you should be familiar with the basic configuration of Cisco ISE, including authentication and authorization policies. We'll begin by creating downloadable ACLs and authorization profiles, so you'll need to be familiar with those as well. You should also understand web authentication. I hope you'll join me in this journey to learn more about Network Access Control with the ISE Posture Services for CCNP Security (300-208) SISAS course, at Pluralsight.

Client Installation
Well hello there, and welcome to our module on Client Installation, and so that's what this module's going to be all about, getting that NAC Agent installed on a client. So let's go ahead and take a look at what we're going to cover in this module. Well, we're going to start off by discussing our posture conditions and what those are all about and how we use those as part of our posture policy. Then we're going to look at something called CoA, or Change of Authorization, and then after that we'll get into the demo, and we'll talk through a lot of what we learn as we go through these initial slides here. So let's start out with that first topic, posture conditions.

Posture Compliance and Remediation
Hi everyone, and welcome to ISE Posture Services for CCNP Security. My name is Brandon Carroll, and in this module, we're going to be heavy in the labs, and we're going to use our posture capabilities to determine if an antivirus software is installed, and if not, we're going to have our end user remediate by installing the version of antivirus that we prefer. Then we will reauthorize and use CoA to adjust the network access for our client, so let's take a look at what we're going to see in this module. So real simple, in this module, we're going to be in the labs configuring our AV posture policy, and then doing some live remediation.

NAC Web Agent
Hi there everyone, and welcome to ISE Posture Services for CCNP Security. My name is Brandon Carroll, and this module is all about how to posture using the web agent. Let's take a look at what we're going to cover in this module. Well, we're going to start this module off with a question. When exactly do we want to use the web agent? And we're going to take a look at a scenario and we'll answer that question for you. Then we're going to talk about how we would provision that agent, and we're going to step right through the process that we would go through. After that, we're going to jump into the lab and we're going to test and verify. So let's get started with that first question, when would I want to use the web agent?