Cisco Identity Services Engine (ISE) sits at the heart of network access control in many enterprises. This five-day course teaches you to deploy, configure and operate ISE, from architecture to device administration, and prepares you for the 300-715 SISE exam, a CCNP Security concentration. Labs mirror real use cases: wired and wireless endpoints, guests, personal devices and compliance checks, with time to troubleshoot what goes wrong.
Choose an ISE deployment model and distribute personas
Integrate ISE with Active Directory, LDAP, PKI and MFA solutions
Implement 802.1X, MAB and authentication and authorization policies
Build guest workflows and sponsor portals
Profile endpoints and use Change of Authorization (CoA)
Deploy BYOD onboarding and posture assessment
Administer network devices with TACACS+ and command authorization
Program
Architecture and deployment (10%)
Personas and deployment models
Hardware and virtual platforms
Zero-touch provisioning
Operations: backups, upgrades and licensing
Policy enforcement (25%)
Identity sources: AD, LDAP, PKI, MFA
802.1X and MAB
TrustSec
Authentication and authorization policies
Web Auth and guest services (15%)
Web authentication
Guest access
Sponsor and guest portals
Profiler (15%)
Profiler services and probes
CoA
Endpoint identity management
BYOD (15%)
Device onboarding
Certificates
Endpoint lifecycle operations
Endpoint compliance (10%)
Posture services
Compliance conditions
Client provisioning
Network access device administration (10%)
AAA protocols
TACACS+ administration
Command authorization
Prerequisites
No formal prerequisites from Cisco
Recommended: familiarity with the Cisco IOS CLI for wired and wireless, Cisco Secure Client, Windows and 802.1X
Target audience
Network security engineers and administrators
Consulting engineers and solution architects
Technical leads on NAC projects
CCNP Security candidates
The exam
Exam 300-715 SISE, Implementing and Configuring Cisco Identity Services Engine (version 1.2), lasts 90 minutes and is delivered in English through Pearson VUE, at a test center or online. Results are pass/fail. Passing it earns the Cisco Certified Specialist – Security Identity Management Implementation and meets the CCNP Security concentration requirement; together with SCOR (350-701), it completes CCNP Security. Certifications are valid for three years and renew by exam or Continuing Education credits.
Preparation tips
Focus first on policy enforcement, the heaviest domain
Trace an 802.1X authentication step by step in ISE live logs
Know exactly how policy sets and rules are evaluated
Frequently asked questions (FAQ)
Is SISE enough for CCNP Security?
No. You also need the SCOR core exam (350-701). SISE on its own earns a Specialist certification.
Is the SISE exam available in French?
No, Cisco offers it in English only. The course itself can be taken in French or English.
Do I need ISE experience before the course?
No, but you should be comfortable with the Cisco CLI and have some notion of 802.1X and Active Directory. The course starts from ISE architecture. We also cover the ISE operations tasks you will need after go-live, such as backups, upgrades and log analysis.
How long is the exam?
The exam lasts 90 minutes. Cisco does not publish a fixed number of questions, so practice reading configuration screens and log extracts quickly, since they take time to interpret.
Does the course cover TrustSec?
Yes. TrustSec is part of the policy enforcement domain and is covered both in theory and in the lab, including assigning security group tags and using them to segment the network.
Securevalley training — online and in-person sessions. Contact us for pricing and registration terms.
Securevalley is not a training partner of Cisco. Cisco, CCNP and Cisco ISE are trademarks of Cisco.