Implementing and Configuring Cisco Identity Services Engine (SISE)

The Implementing and Configuring Cisco Identity Services Engine (SISE) v4.0 course teaches you to deploy and use Cisco® Identity Services Engine (ISE) v3.x, an identity and access control policy platform that simplifies the delivery of consistent, highly secure access control across wired, wireless, and VPN connections. This 5-day hands-on course provides you with the knowledge and skills to implement and apply Cisco ISE capabilities to support use cases for Zero Trust security posture. These use cases include tasks such as policy enforcement, profiling services, web authentication and guest access services, BYOD, endpoint compliance services, and Terminal Access Controller Access Control Server (TACACS+) device administration. Through hands-on practice via lab exercises, you will learn how to use Cisco ISE to gain visibility into what is happening in your network, streamline security policy management, and contribute to operational efficiency.

Course Details

Price:

$3,995.00

Days:

Location:

Virtual

Course Overview

Describe the Cisco Identity Services Engine (ISE) Explain Cisco ISE deployment Describe Cisco ISE policy enforcement components Describe Cisco ISE policy configuration Troubleshoot Cisco ISE policy and third-party Network Access Device (NAD) support Configure guest access Configure hotspots and guest portals Describe the Cisco ISE profiler services Describe profiling best practices and reporting Configure a Cisco ISE BYOD solution Configure endpoint compliance Configure client posture services Configure Cisco ISE device administration Describe Cisco ISE TrustSec configurations

It is recommended, but not required, to have the following skills and knowledge before attending this course: Familiarity with the Cisco IOS® Software command-line interface (CLI) Familiarity with Cisco AnyConnect® Secure Mobility Client Familiarity with Microsoft Windows operating systems Familiarity with 802.1X

Module 1: Introduction to Security in the AWS Cloud

Understand the AWS Shared Responsibility Model
Explore core cloud security principles
Review incident response strategies in AWS
Align DevOps processes with security engineering

Module 2: Managing Identity and Access Control

Define and apply IAM policies, roles, and permissions boundaries
Use IAM Access Analyzer for insight into access risks
Implement multi-factor authentication (MFA)
Monitor access activity with AWS CloudTrail

Module 3: Securing Web Application Environments

Analyze threats to 3-tier application architectures
Address common risks around user and data access
Leverage AWS Trusted Advisor for continuous improvement

Module 4: Application Security at Scale

Harden Amazon Machine Images (AMIs)
Perform automated security assessments with Amazon Inspector
Apply secure configuration management with AWS Systems Manager

Module 5: Data Protection and Encryption Best Practices

Encrypt data in S3, RDS, DynamoDB, and Glacier
Apply key management strategies using AWS KMS
Use S3 Access Analyzer and Access Points for precise control

Module 6: Network Security and Traffic Protection

Implement best practices for securing Amazon VPCs
Use VPC Traffic Mirroring for deep packet inspection
Respond to compromised instances
Secure endpoints with AWS Certificate Manager and ELB

Module 7: Centralized Monitoring and Logging

Configure CloudWatch, AWS Config, and Amazon Macie
Enable VPC Flow Logs, ELB Logs, and S3 Server Access Logs

Module 8: Log Processing and Analysis

Aggregate log data with Amazon Kinesis
Analyze security events using Amazon Athena

Module 9: Securing Hybrid Cloud Architectures

Connect environments with VPNs and Direct Connect
Secure cross-region traffic with AWS Transit Gateway

Module 10: Building Global Resilience and DDoS Protection

Use Route 53 and CloudFront for edge-level protection
Defend against attacks with AWS WAF, Shield, and Firewall Manager

Module 11: Serverless Security Practices

Control access in serverless environments with Amazon Cognito
Secure APIs with API Gateway
Implement least-privilege execution in AWS Lambda

Module 12: Threat Detection and Investigation

Identify suspicious activity with Amazon GuardDuty
Consolidate findings in AWS Security Hub
Perform forensic analysis with Amazon Detective

Module 13: Secrets and Key Management

Manage encryption keys using AWS KMS and CloudHSM
Store and rotate secrets with AWS Secrets Manager

Module 14: Automating Security by Design

Create secure, repeatable deployments with AWS CloudFormation
Standardize infrastructure with AWS Service Catalog

Module 15: Governance and Account Management at Scale

Manage multi-account environments with AWS Organizations
Enforce controls using AWS Control Tower and AWS SSO
Integrate centralized identity with AWS Directory Services

Class Dates & Times


09/08/2025 - 09/12/2025 Virtual 09:00:00 to 17:00:00 EST Enroll Now $3,995.00
12/01/2025 - 12/05/2025 Virtual 09:00:00 to 17:00:00 EST Enroll Now $3,995.00

— Questions?

Information Request

— Empower Change

Invest in Skills & Equality

Support Diversity, Equity, and Inclusion with Every Purchase.

Great Horizons is a North Carolina Certified HUB Vendor and WOSB. By becoming a patron of our organization, you are not only supporting a historically underutilized business, but a woman-owned small business as well.

Student? Switch to our Career Center Site →