Security

The video demonstrates the use of Endpoint Protection Service (EPS) on Cisco ISE 1.2 to quarantine undesired endpoints. Unlike manually removing an endpoint from the network by shutting down port and the endpoint can potentially be moved to a different port to regain access, although ISE also allow you to exactly this by issuing a port-shutdown CoA, placing host MAC address or IP into EPS quarantine ensures the endpoint remains denied from the network regardless of its point to attachment. A policy can be created to block endpoint traffic by ACL or/and placing them into a unusable VLAN.

The video demonstrates the use of a wildcard certificate on Cisco ISE 1.2 to register nodes in a distributed deployment. We will go through CSR generation on ISE, have it signed, and use it to register a secondary Admin/Monitoring/Policy Service node to a primary. You will see how a single certificate can now be used on multiple ISE nodes.

The video brings you up to speed of what's new in Cisco ISE 1.2. We will go through the ISE 1.2 release notes and review each new feature individually and show their corresponding changes on the GUI as applicable. Basic familiarity of Cisco ISE 1.1 is recommended prior to viewing this video. This is an introduction to new features on ISE 1.2 and there will be no configuration in this lab.

The video brings you up to speed of what's new in Cisco ISE 1.2. We will go through the ISE 1.2 release notes and review each new feature individually and show their corresponding changes on the GUI as applicable. Basic familiarity of Cisco ISE 1.1 is recommended prior to viewing this video. This is an introduction to new features on ISE 1.2 and there will be no configuration in this lab.

The video takes you through an upgrade procedure from Cisco ISE 1.1 to 1.2. We will go over some upgrade considerations and pre-requisites and also make sure you are aware of any caveats. Our lab starts with a functioning ISE 1.1 setup, and we will make comparison to the system after being upgraded to ISE 1.2. Although this lab video is for a standalone system, a lot of our discussions and demonstration here also apply to a distributed deployment.

The video takes you through an upgrade procedure from Cisco ISE 1.1 to 1.2. We will go over some upgrade considerations and pre-requisites and also make sure you are aware of any caveats. Our lab starts with a functioning ISE 1.1 setup, and we will make comparison to the system after being upgraded to ISE 1.2. Although this lab video is for a standalone system, a lot of our discussions and demonstration here also apply to a distributed deployment.

The video walks you through an installation of Cisco Identity Services Engine (ISE) 1.2 on VMware. We will start off with a discussion of deployment sizing strategies on how to pick your appliances and size your VM. We will then guide you step-by-step through the installation process. At the end of this lab, you should have a working ISE server that you can use for future labs. No configuration, other than the setup process, is performed in this video. The video assumes that you have basic working knowledge of VMware ESXi.

The video walks you through an installation of Cisco Identity Services Engine (ISE) 1.2 on VMware. We will start off with a discussion of deployment sizing strategies on how to pick your appliances and size your VM. We will then guide you step-by-step through the installation process. At the end of this lab, you should have a working ISE server that you can use for future labs. No configuration, other than the setup process, is performed in this video. The video assumes that you have basic working knowledge of VMware ESXi.

The video walks you through configuration NAT64, NAT46, and DNS64 on Cisco ASA using Twice NAT to connect IPv6 to IPv4 network. We will look at both Stateless and Stateful NAT64 and NAT46, and highlight their pros and cons, and suggest when you should use one over the other. For Stateful NAT64, we will configure static, dynamic NAT, and PAT. Packet analysis on Wireshark will be performed to help us gain better understanding of the IP address translation. Since this video is a counterpart of SEC102-103 with Object NAT, we will make comparisons between these two NAT configuration options. 

The video walks you through configuration NAT64, NAT46, and DNS64 on Cisco ASA using Twice NAT to connect IPv6 to IPv4 network. We will look at both Stateless and Stateful NAT64 and NAT46, and highlight their pros and cons, and suggest when you should use one over the other. For Stateful NAT64, we will configure static, dynamic NAT, and PAT. Packet analysis on Wireshark will be performed to help us gain better understanding of the IP address translation. Since this video is a counterpart of SEC102-103 with Object NAT, we will make comparisons between these two NAT configuration options.