Security

The video walks you through an installation process of Cisco VNMC. To build foundation of our system, we will register VNMC to vCenter and register VSM to VNMC. We will also create a simple organization hierarchy for our virtual datacenter in preparation for our future labs. This video is applicable to both Cisco VSG and ASA 1000V.

• VNMC Installation
• VSM
• vCenter

Recommeded Videos:

The video introduces you to the concepts behind Cisco VSG and VNMC. We will help you understand how VSG works with other components such as VNMC, VSM and VEM to provide policy-based security within an IP subnet. This video serves as a prerequisite to our future VSG labs. Since this is an introduction-to-technology video, there will be no lab.

• VSG
• VNMC
• VSM
• VEM
• vPath

The video demonstrates Cisco TrustSec support on Cisco ASA 9.1 with Cisco ISE. This lab is based on a 3750 switch that is not TrustSec hardware-capable but able to communicate IP-to-SGT mapping via SGT Exchange Protocol (SXP) to the ASA. We will be constructing an ACL based on SGT using the new Security object group.

The video introduces you to the concept behind Cisco TrustSec. You will be able to understand the basic components that make up Cisco TrustSec and their interaction, which is a prerequisite for our future TrustSec labs. This is an introduction-to-technology video so there will be no lab.

• Cisco TrustSec
• Security Group Tag (SGT)
• Security Group ACL (SGACL)
• SGT Exchange Protocol (SXP)

The video demonstrates how to install a software patch on your Cisco ISE, then roll it back using CLI. 

• Repository
• Patch Install
• Patch Rollback

The video explores Cisco ISE capabilities to provide guest login and sponsorship. We will look at how we can create a sponsor group and configure sponsor group policy to allow a sponsor to manage their guest accounts. We will configure a guest portal with a simple portal customization, and allow guest to perform self-service. As part of our testing, we will create a guest account through a sponsor portal page and test login over wired network. We will also test creating a guest account through self-service over wireless.

The video explores Cisco ISE capabilities to provide guest login and sponsorship. We will look at how we can create a sponsor group and configure sponsor group policy to allow a sponsor to manage their guest accounts. We will configure a guest portal with a simple portal customization, and allow guest to perform self-service. As part of our testing, we will create a guest account through a sponsor portal page and test login over wired network. We will also test creating a guest account through self-service over wireless.

The video extends our knowledge on Cisco ISE posture assessment to guest machines that do not have NAC Agent installed. Continuing on from our previous NAC Agent videos, we will be performing basic Antivirus software install check on a guest machine using the temporal NAC Web Agent. We will look at both situations where the posture check passes and fails and ability to switch user to a different VLAN upon being compliant.

The video looks at posture assessment configuration on Cisco ISE. We will be performing Antivirus installation, and signature definition update checks before allowing a domain user onto the network.  Using wired Windows 7 and ClamWin Antivirus as an example, we will step through the posture assessment process, starting from NAC Agent download, and, along the way, try to bring our test machine to a compliant state to gain full network access.