+ Reply to Thread
Results 1 to 3 of 3
  1. Senior Member Staunchy's Avatar
    Join Date
    Jul 2013
    Location
    Johannesburg, South Africa
    Posts
    178

    Certifications
    CompTIA N+, Win 7, MCITP: SA, MCSA, CCENT, CCNA R&S, JNCIA, JNCIS-ENT, HP ATP V1 & V2, Aruba ACMP, Palo Alto ACE, Citrix CCP-N
    #1

    Default Cisco ISE Traning

    Hi,

    Have anyone here attended the the cisco training course "Implementing and Configuring Cisco Identity Services Engine" and wrote the exam 500-254?

    I have been working a bit on Aruba ClearPass but never touched ISE so I'm excited to see how ISE compares to ClearPass.
    Reply With Quote Quote  

  2. SS -->
  3. Member
    Join Date
    Sep 2010
    Posts
    71

    Certifications
    M.S. Cyber Security, sec+, Linux +, CCNA RS, CCNA Sec, OSCP
    #2
    I took the Global Knowledge course. I sat for the exam shortly after. I suggest using cbt nuggets video along with the course. The simlets on the test are pretty easy though. You will def be able to do those with ease after the bootcamp.
    Reply With Quote Quote  

  4. ABL - Always Be Labbin' Iristheangel's Avatar
    Join Date
    Dec 2009
    Location
    Pasadena, CA
    Posts
    3,668

    Certifications
    CISSP, CCIE DC, CCNP R&S/DC, CCDP, CCNA:RS/S/V/DC, CCDA, BCVRE, BCEFP, BCNE, CEH, CHFI, MCSE:S, MCDST, A/S/L/P/N+, some useless Citrix and CIW certs
    #3
    I took the class and passed the exam. Pretty easy stuff but I felt the exam and content wasn't super great tbh. I got more out of reading and labbing on my own than I ever did with that class.

    As far as how ISE stacks up with Clearpass, I'm a bit bias so I'll just put that out of the way but I love ISE over Clearpass. This is coming from someone who went through the nightmare of ISE 1.1 and now madly loves ISE 2.0. Like Clearpass, it integrates with third-party MDM solutions and has TACACS+ and provides that same intelligence just like Clearpass. I don't think Clearpass supports EAP-chaining yet from my understanding but it's been awhile since I used it.

    They also didn't support custom profiles back when I used it.So if Clearpass didn't have a profile already for the device (i.e. non-dot1x cheap ass CCTV camera some random site buys and plugs in), we would have been stuck doing basic MAC whitelisting which wasn't a very secure solution in our minds


    ISE also has some cool integrations. I've been labbing and documenting Pxgrid lately which is pretty badass. I can basically have ISE sharing information with a Pxgrid Client (Lancope, Checkpoint Firewalls, Splunk, WSA, etc)and depending on the functionality of the Pxgrid client, you can also add quarantining into the mix i.e. I can create a correlation policy on my firewall to send a message to ISE to quarantine an endpoint if a certain policy is triggered (i.e. verified threat, impact 1 intrusion event, malware detected, etc)as well as create an unquarantine condition to do the exact opposite. With Splunk, you can pretty much have all that information gathered from ISE and do the same thing from the Splunk console and Lancope as well. The ISE ecosystem on what it can integrate with is pretty large and getting larger: Partner Ecosystem - Security - Cisco
    BS, MS, and CCIE #50931
    Blog: www.network-node.com
    Bonus TE Fun: Nerd Photos
    Reply With Quote Quote  

+ Reply to Thread

Social Networking & Bookmarks