ISE

The video brings you up to speed of what's new in Cisco ISE 1.3. We will go through the ISE 1.3 release notes and review each new feature individually and show their corresponding changes on the GUI where applicable. Basic familiarity of Cisco ISE 1.1 or 1.2 is recommended prior to viewing this video. This is an introduction to new features on ISE 1.3 and there will be no configuration in this lab.

The video brings you up to speed of what's new in Cisco ISE 1.3. We will go through the ISE 1.3 release notes and review each new feature individually and show their corresponding changes on the GUI where applicable. Basic familiarity of Cisco ISE 1.1 or 1.2 is recommended prior to viewing this video. This is an introduction to new features on ISE 1.3 and there will be no configuration in this lab.

The video introduces you to file policy used to perform file type filtering, and detection on Cisco ASA FirePower. Our lab scenarios include blocking and detecting file upload and download through Sharepoint web application and FTP protocol, as well as the ability to capture files. A caveat of having a file transfer in a HTTPS session is also demonstrated.

The video provide a method to enhance reliability of Cisco ASA CX Passive Authentication by integrating Cisco ISE with CDA. You will see how the caveats inherent to CDA can be solved by using realtime user and IP information provided by 802.1x identity-based authentication network. We will analyze RADIUS packets being communicated between Cisco ISE and CDA to try to understand the underlying mechanism. Testing will be performed on both domain and non-domain devices, that have been onboarded through ISE, and this includes both wired and wireless.

The video provide a method to enhance reliability of Cisco ASA CX Passive Authentication by integrating Cisco ISE with CDA. You will see how the caveats inherent to CDA can be solved by using realtime user and IP information provided by 802.1x identity-based authentication network. We will analyze RADIUS packets being communicated between Cisco ISE and CDA to try to understand the underlying mechanism. Testing will be performed on both domain and non-domain devices, that have been onboarded through ISE, and this includes both wired and wireless.

The video explains and demonstrates the relationship between tunnel-group and group-policy on Cisco ASA SSL VPN and compare them to the IPSec counterpart. You will learn different ways to land a user on a tunnel-group and either statically or dynamically assign them to a group-policy. Both pros and cons of each method will be discussed so you can decide which is best suited for your deployment. 

The video explains and demonstrates the relationship between tunnel-group and group-policy on Cisco ASA SSL VPN and compare them to the IPSec counterpart. You will learn different ways to land a user on a tunnel-group and either statically or dynamically assign them to a group-policy. Both pros and cons of each method will be discussed so you can decide which is best suited for your deployment. 

The video walks you through wireless sponsor and guest access configuration on Cisco ISE 1.2. We will take the same lab we did back in ISE 1.1 and rebuild our guest authentication so you can see how guest portal has changed in ISE 1.2 as well as preparing ourselves for full HTML custom guest portal in the second half of the video. We will show you how to create a custom guest login page so a background on HTML coding and CSS is recommended as a pre-requisite.