Cisco ISE — Identity & NAC Track
802.1X, profiling, posture, BYOD, TrustSec — the full ISE deployment lifecycle, aligned to 300-715 SISE.
Who Is This For
- Network engineers deploying NAC for the first time
- Security engineers handling 802.1X, BYOD, posture
- L2 / L3 admins targeting 300-715 SISE certification
- Engineers integrating ISE with firewalls (PxGrid)
Prerequisites
- CCNA-level networking
- Basic Active Directory / RADIUS knowledge
Full Syllabus — 12 Modules
M 1ISE Architecture & Deployment
- Personas — Admin, Monitoring, Policy Service, pxGrid
- Standalone vs Distributed deployment
- Sizing & design considerations
- Initial setup workflow
M 2Authentication Concepts
- RADIUS, TACACS+ deep dive
- EAP types — PEAP, EAP-TLS, EAP-FAST, EAP-TTLS
- MAB & 802.1X
- Certificate-based auth
M 3Identity Sources & AD Integration
- Internal users, AD, LDAP, ODBC
- External identity sequences
- Group / attribute mapping
- Multi-domain AD deployments
M 4Policy Sets & Authorization
- Policy Set design
- Authentication vs Authorization rules
- Conditions & results
- Authorization profiles & permissions
M 5802.1X — Wired & Wireless
- Switch & WLC configuration
- EAP chaining
- Open vs closed mode, monitor mode
- VLAN assignment, dACL push
M 6Profiling & Endpoint Identity Groups
- Profiling probes — DHCP, RADIUS, SNMP, NetFlow
- Custom profiler conditions
- Endpoint groups
- Anomaly detection
M 7Posture Assessment
- Posture flow — discovery, AnyConnect / Cisco Secure Client
- Compliance modules & conditions
- Remediation actions
- Posture reports
M 8Guest Access & BYOD
- Hotspot, sponsored, self-registered guest portals
- Native supplicant provisioning
- BYOD onboarding flow
- EAP-TLS certificate provisioning
M 9TrustSec & Security Group Tags
- SGT concepts & classification
- SGACL design
- Inline tagging vs SXP
- Microsegmentation use cases
M 10pxGrid & Integrations
- pxGrid architecture
- FMC, FTD, Stealthwatch, third-party integrations
- ANC mitigation actions
- Threat-Centric NAC
M 11Operations, Reporting & Troubleshooting
- Live Logs & Live Sessions
- RADIUS Live Log filters
- Common 802.1X issues
- Tech support bundle, debugs
M 12Cert Path & Interview Prep
- 300-715 SISE blueprint
- Mock exam patterns
- L2 / L3 NAC interview question bank
What You Get
40 Hours
Live + recorded for the full ISE deployment lifecycle.
Hands-on Labs
ISE in EVE-NG / dCloud — full 802.1X / posture / TrustSec build.
Real Case Studies
BYOD onboarding, TrustSec rollout, 802.1X troubleshooting, pxGrid integration.
Interview Q&A
L2 / L3 NAC question bank.
Certificate
Techclick Infosec course completion certificate.
WhatsApp Group
Doubt-clearing batch group with the trainer.
Your Instructor
Trained by working senior cloud and network security engineers with 13+ years of hands-on enterprise experience across Cisco ISE, identity, NAC and large-scale enterprise networks.
FAQ
Q 1CCNA required?
Recommended. We can recap basics if needed but ISE assumes networking foundation.
Q 2Hands-on labs?
Yes — ISE VM in EVE-NG with Cisco switches and a wireless sim.
Q 3Aligned with SISE 300-715?
Yes. Module 12 covers the full blueprint and mock questions.
Q 4Duration?
About 40 hours over 5–6 weeks.
Q 5Placement help?
CV review and interview prep.
Become the NAC engineer every enterprise needs.
Talk to us about the next batch.