0345 4506120

Implementing Cisco Identity Services Engine for Wireless Engineers

This course has been designed to enable wireless engineers understand the concepts, architecture, and use cases of the Cisco Identity Services Engine Solution.This course provides students with the knowledge and skills required to implement a basic Cisco ISE solution. The focus is on ensuring that students can implement the core features required in most Identity Services Engine Solution deployments. Students should already be familiar with basic Cisco Wireless LAN Controller and Access Point configuration.

This course is on ISE 1.2.

Target Audience:

Wireless Engineers new to deploying Cisco's Identity Services Engine Solutions.


Learning Objectives

After attending this course you should be able to:

  • Describe the business drivers, architecture, components, and scalability factors related to typical Cisco ISE deployment 
  • Provision secure network access by configuring AAA services and common CoA options 
  • Configure profiling processes, components, options, and best practices 
  • Provision a guest user access solution and the different options that are available 
  • Describe and implement a BYOD solution, with a focus on configuring BYOD using a single SSID 
  • Integrate Cisco ISE with a partner MDM solution 
  • Use Cisco ISE tools to gather useful information related to historical trending and to troubleshoot


Attendees should meet the following prerequisites.

  • Knowledge of basic 802.1X (It is recommended that the student take the free 802.1X E-learning on PEC before attending this training.) 
  • Basic understanding of Microsoft Active Directory or LDAP 
  • CCNA-level route and switch knowledge - Interconnecting Cisco Network Devices pt1 and Interconnecting Cisco Network Devices pt2 or Cisco CCNA Routing and Switching Boot Camp (CCNAX - Accelerated).

Course Content

Introduction to Cisco ISE

  • Business Benefits of ISE 
  • ISE Architecture and Components 
  • ISE Nodes and Personas 
  • Different ISE Deployment Options
  • ISE Licensing Options and Considerations

Provisioning Secure Access

  • Authentication Services available with ISE 
  • Validating Credentials from Different Identity Sources. 
  • Configuring Authentication Identity Sources and Policies
  • ISE Authorization Policies and their Components 
  • Configuring Authorization Components and Policies 
  • Define and Understand CoA and review common permission elements, including dACLs, named ACLs, VLANs, and SGT

Configuring Profiling

  • Functions and Purpose of Profiling 
  • Profiler Probes and Attributes associated with these Probes 
  • Configuring Profiler Policies 
  • Configuring Profiling 
  • Verifying Profiler Operation 
  • Best practices for Configuring Profiling

Providing Guest Access

  • Concept of Guest Web Access 
  • Configuring the Components of a CWA-based Guest Access Solution 
  • Guest Accounts, Roles, and Data stores 
  • Functionality of ISE Portals used for Guest Access 
  • Configuring Support for Guest Reporting 
  • Best Practices for ISE Guest Services

Implementing BYOD

  • Overview of BYOD Components 
  • Advantages of a BYOD Solution 
  • Common BYOD Use Cases 
  • BYOD Deployment and Configuration Options 
  • BYOD Flow and On-Boarding Process when a Single SSID is used 
  • Implementing an Authentication Policy for BYOD Deployments 
  • Implementing an Authorization Policy for BYOD Deployments

Exploring MDM Integration

  • MDM Integration Processes 
  • Adding an MDM Server 
  • MDM Supported Attributes 
  • MDM Configuration

Monitoring and Troubleshooting Cisco ISE Security Solutions

  • ISE Dashboard 
  • Navigate ISE Alarm and Logging Features to assist in Diagnosing Problems 
  • Using the Live Authentications Log feature of Cisco ISE 
  • Use the Global Search and Session Trace features of Cisco ISE 
  • Use the TCP Dump feature of Cisco ISE 
  • Use the Evaluate Configuration Validator tool


  • Lab 2-1: Basic Authentication and Authorization 
  • Lab 3-1: Configuring and Validating Cisco ISE Profiling 
  • Lab 4-1: Configuring Cisco ISE Guest Services 
  • Lab 5-1: BYOD On-Boarding using a Single SSID 
  • Lab 5-2: Testing On-Boarding 
  • Lab 7-1: Monitoring and Troubleshooting Cisco ISE (Optional)

Exams & Certification

There are currently no exams associated to this course


Students looking for a more indepth understanding of Cisco's Identity Services Engine should consider:

  • SISE - Implementing and Configuring Cisco Identity Services Engine - ISE 1.1 
  • SISAS - Implementing Cisco Secure Access Solutions - ISE 1.2

Privacy Notice

In order to provide you with the service requested we will need to retain and use your contact information in accordance with our Privacy Notice. If you choose to provide us with this information you explicitly consent to us using the information as necessary to provide the requested service to you. If you do not agree please do not proceed to request the service from us.

Marketing Permissions

Would you like to receive our newsletter and other information on products and services which we think will be of interest to you by email. We will always treat your information with care and in accordance with our Privacy Notice. You are free to withdraw this permission at any time.


Our Customers Include