Security

The video shows a functional integration of ASA Firepower with ISE 2.0 pxGrid service. We will have the Firepower join pxGrid using certificate-based authentication and subscribe for user contextual information. We will create and test Firepower access policies to restrict user traffic based on their AD group membership and assigned Security Group Tag. 

The video shows you how to enable MACsec (802.1AE) Layer 2 Link encryption on Cisco ISE 2.0. We will cover both endpoint-to-switch and switch-to-switch scenarios. Cisco AnyConnect NAM will be used in endpoint-to-switch MACsec. Switch-to-Switch MACsec will be performed as part of TrustSec as well as manual configuration. At the end, we will analyse MACsec frame with Wireshark.

The video shows you how to enable MACsec (802.1AE) Layer 2 Link encryption on Cisco ISE 2.0. We will cover both endpoint-to-switch and switch-to-switch scenarios. Cisco AnyConnect NAM will be used in endpoint-to-switch MACsec. Switch-to-Switch MACsec will be performed as part of TrustSec as well as manual configuration. At the end, we will analyse MACsec frame with Wireshark.

The video demonstrates SXP capability on Cisco ISE 2.0 to relay SGT between SXP-capable network devices. We will use WLC as SXP speaker, while ASA and switch as listeners and enforcers. The switch has SGACL implemented from the previous video and the ASA will leverage SGT in its ACL. We will also look at Static SXP Mapping.

The video demonstrates SXP capability on Cisco ISE 2.0 to relay SGT between SXP-capable network devices. We will use WLC as SXP speaker, while ASA and switch as listeners and enforcers. The switch has SGACL implemented from the previous video and the ASA will leverage SGT in its ACL. We will also look at Static SXP Mapping.

The video demonstrates SXP capability on Cisco ISE 2.0 to relay SGT between SXP-capable network devices. We will use WLC as SXP speaker, while ASA and switch as listeners and enforcers. The switch has SGACL implemented from the previous video and the ASA will leverage SGT in its ACL. We will also look at Static SXP Mapping.

The video attempts to implement SGT propagation across a WAN over FlexVPN. We will demonstrate capability of Cisco router in participating Cisco TrustSec including joining SGT trust domain, Network Device Authorization, SGT propagation, and enforcement. We will configure ZBFW to utilize source SGT in conjunction with ACL to restrict network access.

The video attempts to implement SGT propagation across a WAN over FlexVPN. We will demonstrate capability of Cisco router in participating Cisco TrustSec including joining SGT trust domain, Network Device Authorization, SGT propagation, and enforcement. We will configure ZBFW to utilize source SGT in conjunction with ACL to restrict network access.

The video attempts to implement SGT propagation across a WAN over FlexVPN. We will demonstrate capability of Cisco router in participating Cisco TrustSec including joining SGT trust domain, Network Device Authorization, SGT propagation, and enforcement. We will configure ZBFW to utilize source SGT in conjunction with ACL to restrict network access.

The video walks you through configuration of SGACL on Cisco ISE 2.0. Using the SGT created in the previous video, we will map them into SGACL matrix and apply appropriate access policy. We will configure a switch to download SGACL from ISE and have it act as our enforcement point (Network as a Enforcer).