Paths

Cisco SISAS (300-208) for CCNP Security

Author: Brandon Carroll

This learning path covers the knowledge a network security engineer needs to understand the components and architecture of secure access by using 802.1X and Cisco TrustSec. Over... Read more

What you will learn

  • Identity Management/Secure Access
  • Threat Defense
  • Troubleshooting, Monitoring, and Reporting Tools
  • Threat Defense Architectures
  • Identity Management Architectures

Pre-requisites

It’s recommended that viewers have watched or have knowledge equivalent to what’s covered in Cisco’s CCNA Security certification.

SISAS (300-208)

This learning path covers the knowledge a network security engineer needs to understand the components and architecture of secure access by using 802.1X and Cisco TrustSec. Over the course of the path, you’ll cover identity management and secure access; threat defense; troubleshooting, monitoring, and reporting tools; threat defense architectures; and identity management architectures. These courses can help you prepare for the Cisco SISAS (300-208) exam.

Introduction to Cisco ISE for CCNP Security (300-208) SISAS

by Brandon Carroll

Sep 2, 2015 / 2h 58m

2h 58m

Start Course
Description

This course is part of a series designed to cover the 300-208 SISAS exam, part of the CCNP Security series. In this course, you'll learn the basics of ISE capabilities and 802.1x. In the labs, you'll see how to configure ISE for authentication using a Windows 8 supplicant and PEAP. Additionally, you'll learn how to handle clients that do not support EAP with Mac Authentication Bypass (MAB).

Table of contents
  1. Getting Started with ISE and 802.1x26m
  2. Bootstrapping ISE and NAD Configurations1h 17m
  3. Configuring Authentication41m
  4. Configuring MAB20m
  5. Course Summary12m

Cisco ISE Guest Access for CCNP Security (300-208) SISAS

by Brandon Carroll

Apr 17, 2017 / 1h 43m

1h 43m

Start Course
Description

This course builds on a series designed to cover topics of the 300-208 SISAS course by teaching how Cisco ISE Guest Access is configured. It's designed to be viewed after the introduction and access control courses, as those configurations are required to complete the labs that are demonstrated. In this course, Cisco ISE Guest Access for CCNP Security (300-208) SISAS, you'll be introduced to Web authentication (WebAuth), and the components required to enable Web authentication for end users. First, you'll learn what's involved in expanding that configuration to support guest access. You'll then explore the configuration of a sponsor portal to create guest accounts, and discover how it's demonstrated in the course. Lastly, you'll learn how to test and verify guess access in your Cisco ISE environment. By the end of this course, you'll know how guest access works, and most importantly the configuration steps required to make it happen.

Table of contents
  1. Course Overview2m
  2. Course Introduction and WebAuth54m
  3. Providing Guest Access33m
  4. Course Summary13m

Advanced Access Control with Cisco ISE for CCNP Security (300-208) SISAS

by Brandon Carroll

Dec 14, 2016 / 2h 36m

2h 36m

Start Course
Description

The CCNP Security is a highly recognized industry certification and Cisco ISE is one of the most widely deployed Identity management solutions. In this course, Advanced Access Control with Cisco ISE for CCNP Security (300-208) SISAS, you'll first learn how to configure certificate-based authentication with EAP-TLS. Next you'll learn about advanced authentication methods with downloadable ACLs. Finally, you'll learn about Security Group Access, and MacSec. This course prepares you for a portion of the material found on the 300-208 SISAS exam. By the end of this course, you'll be one step closer to being prepared to take the SISAS exam.

Table of contents
  1. Course Overview2m
  2. Course Introduction12m
  3. Certificate Based Authentication with EAP-TLS47m
  4. Access Control with Authorization44m
  5. Introduction to TrustSec and MacSec43m
  6. Course Summary7m

ISE BYOD for CCNP Security (300-208) SISAS

by Brandon Carroll

Nov 8, 2017 / 2h 8m

2h 8m

Start Course
Description

BYOD is a definite trend in today's networks. Being able to address the onboarding of clients in a way that provides secure connectivity and an acceptable user experience is what Cisco ISE does. In this course, ISE BYOD for CCNP Security (300-208) SISAS, you'll learn how to implement two BYOD solutions using Cisco ISE. First, you'll discover how to implement the single SSID BYOD design. Next, you'll delve into implementing the dual SSID BYOD design. Finally, you'll explore topics from the Cisco SISAS exam (300-208), which is part of an overall series that's designed to prepare you for your CCNP Security certification. By the end of this course, you'll have a comprehensive understanding of ISE BYOD to prepare you for CCNP Security (300-208) SISAS.

Table of contents
  1. Course Overview1m
  2. Course Introduction and BYOD Overview12m
  3. Single SSID BYOD Design1h 11m
  4. Dual SSID BYOD Design25m
  5. Course Summary and Exam Tips16m

ISE Posture Services for CCNP Security (300-208) SISAS

by Brandon Carroll

May 23, 2017 / 1h 50m

1h 50m

Start Course
Description

Knowing what the posture of devices connecting to the network is a daunting task, especially when there are so many different types of devices. In this course, ISE Posture Services for CCNP Security (300-208) SISAS, you'll learn how to use Cisco ISE to posture clients as they come on to the network and control the type of access they gain. First, you'll explore the components of posture services. Next, you'll discover how to setup ISE to support posture services. Finally, you'll configure ISE to posture devices and control access. When you're finished with this course, you'll know how to implement posture services in an enterprise network.

Table of contents
  1. Course Overview1m
  2. Getting Started with Posture Services23m
  3. Client Installation29m
  4. Posture Compliance and Remediation14m
  5. NAC Web Agent29m
  6. Course Summary10m

ISE Profiling Services for CCNP Security (300-208) SISAS

by Brandon Carroll

Jun 16, 2017 / 1h 56m

1h 56m

Start Course
Description

Cisco ISE is one of the most widely used Identity Management Solutions in modern enterprise networks. In this course, ISE Profiling Services for CCNP Security (300-208) SISAS, you'll learn the ins and outs of the Cisco Profiler service. First, you'll cover how this service can help you to properly identify devices that connect to your network. Next, you'll explore how to apply proper authorization policies in Cisco ISE to devices like printers, cameras, and IoT devices. Finally, you'll learn about the topics that would be asked on the 300-208 SISAS exam. By the end of this course, you'll be able to deploy Profiler and identify devices by placing them into endpoint identity groups, and then applying authorization policy to those devices.

Table of contents
  1. Course Overview1m
  2. Getting Started with Profiling Services36m
  3. Using Profiler Information in Policies45m
  4. Creating Custom Profiler Policies21m
  5. Course Summary11m