ISE

The video shows how to integration Cisco Identity Services Engine (ISE) with Cisco DNAC and looks at the Security Policy aspects of SDA. We will used DNAC to push AAA configuration to network devices and perform testing with wired 802.1X and guest access. Coupled with SDA fabric, the power of identity-based network access will be demonstrated.

The video shows how to integration Cisco Identity Services Engine (ISE) with Cisco DNAC and looks at the Security Policy aspects of SDA. We will used DNAC to push AAA configuration to network devices and perform testing with wired 802.1X and guest access. Coupled with SDA fabric, the power of identity-based network access will be demonstrated.

The video shows how to integration Cisco Identity Services Engine (ISE) with Cisco DNAC and looks at the Security Policy aspects of SDA. We will used DNAC to push AAA configuration to network devices and perform testing with wired 802.1X and guest access. Coupled with SDA fabric, the power of identity-based network access will be demonstrated.

The video shows how to install a software patch to Cisco ISE 2.2 using the web interface. We will also test patch rollback afterwards.

The video shows a procedure to upgrade a Cisco ISE 2.1 2-node distributed deployment to ISE 2.2 using the web interface. We will discuss any prerequisite and also what to expect if you have more than 2 ISE nodes to upgrade.

The video shows how to perform backup and restore on Cisco ISE 2.2. We will look at various type of backup including Configuration, Operational, Policy with XML, Certificate, and ISE CA Certificate. We will perform on-demand backup via FTP and test the server restore.

The video shows how Cisco ISE 2.2 can detect anomalous endpoints and perform endpoint quarantine accordingly. We will go through different methods ISE uses to identify anomalous endpoints by having a Windows computer masquerading as a printer, and wireless device suddenly appear as wired device. 

The video shows Cisco ISE 2.2 integration with Rapid 7 Nexpose (InsightVM) using Threat Centric NAC to launch endpoint vulnerability scan. We will setup the system so the scan is performed upon user successful authentication, and force endpoint quarantine when the CVSS score exceed a threshold.

The video shows Cisco ISE 2.2 integration with Rapid 7 Nexpose (InsightVM) using Threat Centric NAC to launch endpoint vulnerability scan. We will setup the system so the scan is performed upon user successful authentication, and force endpoint quarantine when the CVSS score exceed a threshold.

The video shows how you can authenticate a Windows domain user without using 802.1X supplicant with Easy Connect feature on Cisco ISE 2.2. We will go through concept, pre-requisite with Passive ID, and configuration. A testing on Windows 10 computer will be performed to demonstrate its working operation, and some scenarios where this may not work.