Security

The video demonstrates TACACS+ configuration for Device Admin with Shell Profile on Cisco ISE 2.0. We will go through the entire process of adding network devices, users, and building authentication and authorization policies under the new TACACS+ Work Centers. We will configure basic AAA configuration on a Cisco switch and ASA firewall. We will use both local and AD users for testing and granting shell privilege 15 in this lab.

The video brings you up to speed on what's new in Cisco ISE 2.0. We will go through the ISE 2.0 release notes and review each new feature individually and show their corresponding changes on the GUI where applicable. Basic familiarity of Cisco ISE 1.x is recommended prior to viewing this video. This is an introduction to new features on ISE 2.0 and there will be no configuration in this lab.

The video brings you up to speed on what's new in Cisco ISE 2.0. We will go through the ISE 2.0 release notes and review each new feature individually and show their corresponding changes on the GUI where applicable. Basic familiarity of Cisco ISE 1.x is recommended prior to viewing this video. This is an introduction to new features on ISE 2.0 and there will be no configuration in this lab.

The video shows how you can leverage Active Directory database for your ISE 1.3 administrative login. We will create two different sets of admin permission and assign them to users accordingly to their AD group membership. Users will have limited access to ISE menu options and data according to our policy configuration.

The video introduces you to the new pxGrid feature on Cisco ISE 1.3. We will begin with enabling pxGrid service and install required certificate. We will then configure Identity Mapping feature, connect ISE to a domain controller, and test authentication for user-to-IP mapping. We will finish up by enabling auto-registration and review publisher and subscriber roles. 

The video walks you through the process of sponsor and guest portal customization on Cisco ISE 1.3. We will review Cascading Style Sheet (CSS) created back in the the Portal Customization video and apply it to our Sponsor and Guest portals, and make other basic changes including portal logo, banner, and wordings. We will also extend the customization to sponsor and guest account notification emails and prints while demonstrating the use of variables in order to insert guest-specific information onto the page. 

The video walks you through the process of sponsor and guest portal customization on Cisco ISE 1.3. We will review Cascading Style Sheet (CSS) created back in the the Portal Customization video and apply it to our Sponsor and Guest portals, and make other basic changes including portal logo, banner, and wordings. We will also extend the customization to sponsor and guest account notification emails and prints while demonstrating the use of variables in order to insert guest-specific information onto the page. 

The video extends our knowledge on Cisco ISE 1.3 posture assessment to guest computers, specifically Windows, that do not have NAC Agent installed. Continuing on from our previous guest videos, we will enable device compliance check using temporal NAC web Agent. We will perform basic Antivirus software install check and look at both situations where the posture check passes and fails, in which case, we will also perform remediation.

The video demonstrates a feature called 802.1X and CWA chaining on Cisco ISE 1.3. Many organization has a requirement to enforce two-factor authentication and here we will combine knowledge from previous videos to achieve this. In addition to performing 802.1X machine and user authentication, we will force our internal users to provide login credential through guest web portal. User information will be cross-checked between two methods for consistency before allow network access.

The video demonstrates a feature called 802.1X and CWA chaining on Cisco ISE 1.3. Many organization has a requirement to enforce two-factor authentication and here we will combine knowledge from previous videos to achieve this. In addition to performing 802.1X machine and user authentication, we will force our internal users to provide login credential through guest web portal. User information will be cross-checked between two methods for consistency before allow network access.