ISE

The video looks into Cisco ISE 1.2 wireless 802.1X authentication with FlexConnect AP. We will configure wireless AP and SSID to operate in central switching and local switching and compare authorization capability on ISE between the two modes. Since local switching mode does not support DACL, we will be configuring FlexConnect ACL and FlexConnect group and use dynamic VLAN assignment to place a wireless user on a VLAN with appropriate ACL.

The video demonstrates the use of Endpoint Protection Service (EPS) on Cisco ISE 1.2 to quarantine undesired endpoints. Unlike manually removing an endpoint from the network by shutting down port and the endpoint can potentially be moved to a different port to regain access, although ISE also allow you to exactly this by issuing a port-shutdown CoA, placing host MAC address or IP into EPS quarantine ensures the endpoint remains denied from the network regardless of its point to attachment. A policy can be created to block endpoint traffic by ACL or/and placing them into a unusable VLAN.

The video demonstrates the use of Endpoint Protection Service (EPS) on Cisco ISE 1.2 to quarantine undesired endpoints. Unlike manually removing an endpoint from the network by shutting down port and the endpoint can potentially be moved to a different port to regain access, although ISE also allow you to exactly this by issuing a port-shutdown CoA, placing host MAC address or IP into EPS quarantine ensures the endpoint remains denied from the network regardless of its point to attachment. A policy can be created to block endpoint traffic by ACL or/and placing them into a unusable VLAN.

The video demonstrates the use of a wildcard certificate on Cisco ISE 1.2 to register nodes in a distributed deployment. We will go through CSR generation on ISE, have it signed, and use it to register a secondary Admin/Monitoring/Policy Service node to a primary. You will see how a single certificate can now be used on multiple ISE nodes.

The video brings you up to speed of what's new in Cisco ISE 1.2. We will go through the ISE 1.2 release notes and review each new feature individually and show their corresponding changes on the GUI as applicable. Basic familiarity of Cisco ISE 1.1 is recommended prior to viewing this video. This is an introduction to new features on ISE 1.2 and there will be no configuration in this lab.

The video brings you up to speed of what's new in Cisco ISE 1.2. We will go through the ISE 1.2 release notes and review each new feature individually and show their corresponding changes on the GUI as applicable. Basic familiarity of Cisco ISE 1.1 is recommended prior to viewing this video. This is an introduction to new features on ISE 1.2 and there will be no configuration in this lab.

The video takes you through an upgrade procedure from Cisco ISE 1.1 to 1.2. We will go over some upgrade considerations and pre-requisites and also make sure you are aware of any caveats. Our lab starts with a functioning ISE 1.1 setup, and we will make comparison to the system after being upgraded to ISE 1.2. Although this lab video is for a standalone system, a lot of our discussions and demonstration here also apply to a distributed deployment.

The video takes you through an upgrade procedure from Cisco ISE 1.1 to 1.2. We will go over some upgrade considerations and pre-requisites and also make sure you are aware of any caveats. Our lab starts with a functioning ISE 1.1 setup, and we will make comparison to the system after being upgraded to ISE 1.2. Although this lab video is for a standalone system, a lot of our discussions and demonstration here also apply to a distributed deployment.