The Cisco DoD Comply-to-Connect (C2C) training teaches you how to implement and deploy a Department of Defense (DoD) Comply-to-Connect network architecture using Cisco Identity Services Engine (ISE). This training covers implementation of 802.1X for both wired and wireless devices and how Cisco ISE uses that information to apply policy control and enforcement. Additionally, other topics like supplicants, non-supplicants, ISE profiler, authentication, authorization, and accounting (AAA) and public key infrastructure (PKI) support, reporting and troubleshooting are covered. Finally, C2C specific use case scenarios are covered.
This training also earns you 32 Continuing Education (CE) credits towards recertification.
Skills You'll Learn:
- Gain foundational knowledge of 802.1X, MAC authentication bypass (MAB), and extensible authentication protocol (EAP) configuration for both wired and wireless devices
- Gain foundational knowledge of ISE architecture and deployment
- Enforce and configure ISE policy and integrate with supplicants, PKI, and TrustSec
- Understand how ISE profiler works to identify endpoints and configure for network authorization
- Learn about Cisco endpoint compliance with posture assessment with supplicants and third-party network access device (NAD) products
- Explore Cisco ISE monitoring and C2C compliance reporting
- Discover C2C use cases and AAA/terminal access controller access-control system (TACACS+)
Learning Path Objectives:
- Define DoD C2C, including its steps and alignment with ISE features/functions and Zero Trust
- Describe Cisco Identity-Based Networking Services
- Describe the Cisco Identity Services Engine
- Explain Cisco ISE deployment
- Describe Cisco ISE policy enforcement components
- Describe Cisco ISE policy configuration
- Explain PKI fundamentals, technology, components, roles, and software supplicants
- Describe the Cisco ISE profiler service
- Configure endpoint compliance
- Configure client posture services
- Describe profiling best practices and reporting
- Describe the four main use cases within C2C
- Troubleshoot Cisco ISE policy and third-party NAD support
- Describe Cisco ISE TrustSec configurations
- Configure Cisco ISE device administration
