Cisco ISE

Started by icecream-guy, March 09, 2017, 06:04:07 AM

Previous topic - Next topic
Print
Go Down Pages1
User actions

icecream-guy

March 09, 2017, 06:04:07 AM Last Edit: March 09, 2017, 02:11:51 PM by ristau5741
Anyone got any good links or know about free training for Cisco ISE for noobs?

I've got  to get up to speed on it in a short amount of time. 
Got some experience with ACS 5.5

maybe I go look on youtube
:professorcat:

My Moral Fibers have been cut.

deanwebb

#1
March 09, 2017, 08:48:55 AM


BUY THAT BOOK

As for the GUI stuff, I was not impressed with the admin guides. The best exposure I had was shadowing a consultant who used it constantly. Even then, there are some odd rabbit holes in the GUI that are just plain frustrating.
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

icecream-guy

#2
March 09, 2017, 11:06:48 AM
Quote from: deanwebb on March 09, 2017, 08:48:55 AM


BUY THAT BOOK

As for the GUI stuff, I was not impressed with the admin guides. The best exposure I had was shadowing a consultant who used it constantly. Even then, there are some odd rabbit holes in the GUI that are just plain frustrating.

coff coff  95 bucks for a 10+ year old book.... :'( :angry:
:professorcat:

My Moral Fibers have been cut.

deanwebb

#3
March 09, 2017, 04:04:59 PM
True, it is costly, but it is totally worth it. I still refer to it for troubleshooting stuff. The major developments in 802.1X are with VSAs, which Cisco uses a ton of, but everything else in dot1x is according to Brown. One of my favorite tech books.
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

wintermute000

#4
March 09, 2017, 05:23:10 PM
Only a security guy could love dot1x/identity..... :p

deanwebb

#5
March 09, 2017, 06:31:50 PM
Quote from: wintermute000 on March 09, 2017, 05:23:10 PM
Only a security guy could love dot1x/identity..... :p

My video response:

Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

wintermute000

#6
March 09, 2017, 07:24:40 PM
Me during any identity / dot1x conversation or training


icecream-guy

#7
March 10, 2017, 06:14:43 AM
Quote from: wintermute000 on March 09, 2017, 07:24:40 PM
Me during any identity / dot1x conversation or training




yeah,  unfortunately I'm seeing a lot of requests for it in new opportunities. so it's time to ramp up my skills.
:professorcat:

My Moral Fibers have been cut.

deanwebb

#8
March 10, 2017, 10:22:26 AM
Read that book and I guarantee ramped-up skills.

By reading over how it is supposed to work and how it actually works, you get a very good appreciation of how dot1x can royally screw up your DHCP and "phone home" apps and then you learn how to mitigate the impact with pre-authorization permissions.
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

Ctrl Z

#9
March 10, 2017, 12:39:53 PM
ISE can do a lot of things, if you can narrow down what it is your organization is going to do with ISE it'll be easier to get up to speed. Are you getting ready for 802.1x deployment, are you needing to setup just guest wireless at the moment, or you just needing to learn the ACS replacement portion?

deanwebb

#10
March 10, 2017, 01:21:43 PM
^ Of those, the guest wireless is easiest to do, followed by wireless 802.1X.
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

ZiPPy

#11
May 22, 2017, 02:43:26 AM
I know this thread is a bit old, but I was just curious how your ISE implementation is going/went?  I had ISE dropped on my table a few months ago, and just finished up a GK training on ISE 2.1.  I'm still digging in her though, as ISE is a beast! One hell of a beast!!

Cheers,

icecream-guy

#12
May 22, 2017, 06:31:25 AM
Quote from: ZiPPy on May 22, 2017, 02:43:26 AM
I know this thread is a bit old, but I was just curious how your ISE implementation is going/went?  I had ISE dropped on my table a few months ago, and just finished up a GK training on ISE 2.1.  I'm still digging in her though, as ISE is a beast! One hell of a beast!!

Cheers,

project got tossed on the back burner a few month ago. determined not to be a priority at this time.
:professorcat:

My Moral Fibers have been cut.

deanwebb

#13
May 22, 2017, 09:17:01 AM
Quote from: ZiPPy on May 22, 2017, 02:43:26 AM
I know this thread is a bit old, but I was just curious how your ISE implementation is going/went?  I had ISE dropped on my table a few months ago, and just finished up a GK training on ISE 2.1.  I'm still digging in her though, as ISE is a beast! One hell of a beast!!

Cheers,
Yes. ALL of the NAC products are beasts.

Good luck if the guys running Prime push out a template that blanks out all the stuff needed to work with NAC or, worse, *part* of the stuff you need to work with NAC... half a NAC is worse than no NAC at all, as devices get blocked but never unblocked because the RADIUS works but the COA doesn't...
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.
Print
Go Up Pages1
User actions