View Cart
0 Items | Total: US$0.00
Welcome,      Register

You are here

ISE

SEC0258 - FlexVPN L2L with dVTI and External PSK (Part 1)

The video shows you how to configure Cisco FlexVPN with DVTI using local and external pre-shared key (PSK). We start by converting our previous DVTI setup from certificate authentication to PSK. We then shows you, for scalability and consistency purpose, that you can have DVTI headend router centrally fetch PSK from a RADIUS server.
Rating: 
5
Average: 5 (1 vote)
Difficulty Level: 
0

SEC0247 - FTD 6.1 ISE Remediation (Part 3)

The video walks you through configuration of ISE and FTD 6.1 pxGrid integration to perform endpoint quarantine. We will use correlation rule to detect a malware event and pxGrid mitigation module to trigger Endpoint Protection function on ISE. We will show two ways to quarantine endpoint using DACL and SGT. 
Rating: 
5
Average: 5 (1 vote)
Difficulty Level: 
0

SEC0247 - FTD 6.1 ISE Remediation (Part 2)

The video walks you through configuration of ISE and FTD 6.1 pxGrid integration to perform endpoint quarantine. We will use correlation rule to detect a malware event and pxGrid mitigation module to trigger Endpoint Protection function on ISE. We will show two ways to quarantine endpoint using DACL and SGT. 
Rating: 
5
Average: 5 (1 vote)
Difficulty Level: 
0

SEC0247 - FTD 6.1 ISE Remediation (Part 1)

The video walks you through configuration of ISE and FTD 6.1 pxGrid integration to perform endpoint quarantine. We will use correlation rule to detect a malware event and pxGrid mitigation module to trigger Endpoint Protection function on ISE. We will show two ways to quarantine endpoint using DACL and SGT. 
Rating: 
5
Average: 5 (1 vote)
Difficulty Level: 
0

SEC0246 - FTD 6.1 Inline SGT (Part 2)

The video demonstrates inline SGT support on Cisco FTD 6.1. FTD has an ability to read native SGT from packets so here we will use SGT assigned to user from 802.1x authentication to match traffic on access control rule and enforce differentiate access. FTD is now be an integral part of Cisco TrustSec. 
Rating: 
5
Average: 5 (1 vote)
Difficulty Level: 
0

SEC0246 - FTD 6.1 Inline SGT (Part 1)

The video demonstrates inline SGT support on Cisco FTD 6.1. FTD has an ability to read native SGT from packets so here we will use SGT assigned to user from 802.1x authentication to match traffic on access control rule and enforce differentiate access. FTD is now be an integral part of Cisco TrustSec. 
Rating: 
0
No votes yet
Difficulty Level: 
4

RS0095 - Prime 3.1 User Group and Virtual Domain (Part 2)

The video looks at user and group management for administering Cisco Prime Infrastructure 3.1. We will be assigning different user roles to local users, and remote users on AAA servers using both RADIUS and TACACS+. We will then look at virtualizing management domain using virtual domain feature.
Rating: 
5
Average: 5 (1 vote)
Difficulty Level: 
0

RS0095 - Prime 3.1 User Group and Virtual Domain (Part 1)

The video looks at user and group management for administering Cisco Prime Infrastructure 3.1. We will be assigning different user roles to local users, and remote users on AAA servers using both RADIUS and TACACS+. We will then look at virtualizing management domain using virtual domain feature.
Rating: 
5
Average: 5 (1 vote)
Difficulty Level: 
0

Quick Tip: ISE 2.x Unquarantine EPS Endpoint

Since Cisco announced an intention to unify software version across routing and switch platforms, we have already seen the first software release of Denali 16.1 on Cisco IOS XE switches. Subsequently, Cisco has also released the first common software version between router and switch with Denali 16.2.1. While you can upgrade a switch as you normally would, upgrading a router requires a closer attention. In this article, we will show you how to upgrade an ISR 4000 to Denali 16.2.1. We will be using ISR 4321 running IOS XE 3.6.

SEC0223 - ISE 2.0 Adaptive Network Control (ANC) (Part 2)

The video looks at Adaptive Network Control (ANC) feature on Cisco ISE 2.0 and how it can be used to quarantine endpoint devices similarly to its legacy feature called Endpoint Protection Service (EPS). This lab exercise includes creating and testing ANC policies with various type of actions. At the end, we will demonstrate the use of SGT with ANC to leverage SGACL to limit quarantined device network access.
Rating: 
5
Average: 5 (2 votes)
Difficulty Level: 
0

Pages

Subscribe to RSS - ISE

Poll

Vote for the Next Video Series