Skip to content
CBT Nuggets
DemoBook a Demo

Cisco CCNP Implementing and Configuring Identity Services Engine (300-715 SISE) v1.2

Network access control is one of the riskiest changes an IT team can make. A misconfigured 802.1X rollout can lock every user off the network, while unmanaged endpoints, guests, and BYOD devices widen the attack surface. This course gives network and security teams a methodical way to deploy Cisco Identity Services Engine (ISE) and enforce identity-based access across wired, wireless, and VPN connections without causing outages or help desk spikes.

It is built for Network Engineers and Security Engineers on the CCNP Security track. Learners plan ISE node personas and redundancy, integrate ISE with Active Directory and LDAP, and stage 802.1X in phases on IOS switches and Cisco WLCs. They also cover MAB, IBNS 2.0, and Local and Central WebAuth for devices that can't run 802.1X. Later skills cover TACACS+ device administration, TrustSec micro-segmentation with staged approver workflows, and posture policies so only compliant endpoints get access.

For IT Directors and Team Leads, the 94 skills break into focused 45 to 90 minute segments, so you can assign MAB, guest portals, TrustSec, or posture to match current projects. Virtual labs mirror the course topology, and team reporting tracks progress and completion as your team works toward the 300-715 SISE exam. The result is a team that can design, deploy, and support ISE in-house.

Updated February 2026

94Skills
576Videos
46Virtual Labs
1Practice Exam
99hTotal

Who This Course Is For

Built for Network Engineers, Security Engineers, and IT practitioners who own network access control and are working toward the CCNP Security 300-715 SISE exam. It assumes intermediate networking experience, and Team Leads can also assign it to switching and routing staff new to Active Directory or wireless. It fits a CCNP Security certification push or an upcoming ISE or 802.1X rollout.

Skills Your Team Will Gain

  • Plan a phased 802.1X rollout that avoids locking users out of the network
  • Deploy ISE nodes and size PAN, MnT, and PSN personas for scale and redundancy
  • Integrate ISE with Active Directory and troubleshoot it with the test user and diagnostic tools
  • Configure wired and wireless 802.1X on IOS switches, Cisco WLCs, and Windows, mobile, and IP phone supplicants
  • Implement MAB, IBNS 2.0/C3PL policies, and Local and Central WebAuth for non-802.1X devices
  • Build TACACS+ command sets and test per-command authorization for device administrators
  • Stage TrustSec matrix changes with an approver workflow before pushing them to production
  • Create wired posture policies so only compliant endpoints get network access

Course Curriculum

One skill is free to watch — no signup needed. The other 93 premium skills unlock for your whole team with a CBT Nuggets plan.

Free skill preview

Get Started with IBNS 2.0 for Wired 802.1X

Kelvin TranDuration: 1h 3m12 videos1 virtual lab

Watch this complete skill free — the same trainer, videos, and labs your team gets with a plan.

Watch free skill
  • Premium skill.Explain Network Access Control (NAC)1h 4m · 17 videos
  • Premium skill.Explore the Architecture of Cisco ISE58m · 9 videos
  • Premium skill.Explore Cisco ISE Deployment Options53m · 10 videos
  • Premium skill.Build a Cisco ISE Environment: Preparation1h 8m · 13 videos
  • Premium skill.Build a Cisco ISE Environment: Deploying Services1h 36m · 16 videos
  • Premium skill.Build a Cisco ISE Environment: DHCP and Endpoints56m · 9 videos
  • Premium skill.Build a Cisco ISE Environment: Network Config1h 7m · 10 videos
  • Premium skill.Build a Cisco ISE Environment: Deploying ISE1h 21m · 15 videos
  • Premium skill.Explore Identities in Cisco ISE1h 6m · 13 videos
  • Premium skill.Integrate AD and Cisco ISE with LDAP1h 1m · 9 videos
  • Premium skill.Utilize the Native AD Integration in Cisco ISE56m · 10 videos
  • Premium skill.Describe Policy Structure in Cisco ISE1h 2m · 9 videos
  • Premium skill.Explore the Policy Workflow in Cisco ISE1h 8m · 13 videos · 1 lab
  • Premium skill.Describe AAA Protocols1h 1m · 10 videos
  • Premium skill.Configure Network Devices in ISE53m · 8 videos · 1 lab
  • Premium skill.Describe Port-Based Network Access Control (PNAC)1h 14m · 11 videos
  • Premium skill.Choose an EAP Method1h 2m · 12 videos
  • Premium skill.Prepare for an 802.1X Deployment1h 9m · 21 videos
  • Premium skill.Configure ISE for Wired 802.1X1h 9m · 9 videos · 1 lab
  • Premium skill.Configure IOS Switches for Wired 802.1X52m · 10 videos · 1 lab
  • Premium skill.Implement Wireless 802.1X on Cisco WLCs1h 5m · 15 videos
  • Premium skill.Configure the Native Windows 802.1X Supplicant1h 4m · 11 videos · 1 lab
  • Premium skill.Enhance the Windows Native 802.1X Supplicant58m · 10 videos
  • Premium skill.Configure Mobile 802.1X Supplicants48m · 11 videos
  • Premium skill.Configure Additional Desktop 802.1X Supplicants47m · 8 videos
  • Premium skill.Configure 802.1X on Cisco IP Phones45m · 10 videos
  • Premium skill.Use Externally-Signed LSCs for Cisco Phone 802.1X47m · 11 videos
  • Premium skill.Manage Endpoint Identities48m · 11 videos
  • Premium skill.Create Internal Endpoint Identities1h 4m · 10 videos · 1 lab
  • Premium skill.Create Endpoint Identities in AD/LDAP1h 23m · 13 videos · 1 lab
  • Premium skill.Implement Wired and Wireless MAB1h 26m · 14 videos · 1 lab
  • Get Started with IBNS 2.0 for Wired 802.1XFree1h 3m · 12 videos · 1 lab
  • Premium skill.Examine C3PL Configuration Options1h 6m · 12 videos · 1 lab
  • Premium skill.Customize IBNS 2.0/C3PL Policies1h 17m · 12 videos · 1 lab
  • Premium skill.Prepare to Deploy Local WebAuth (LWA)58m · 13 videos
  • Premium skill.Configure Wired Local WebAuth (LWA)55m · 13 videos
  • Premium skill.Configure Wireless Local WebAuth (LWA)1h 6m · 12 videos
  • Premium skill.Describe Central WebAuth (CWA)45m · 10 videos
  • Premium skill.Configure Central WebAuth (CWA) on ISE1h 1m · 11 videos · 1 lab
  • Premium skill.Configure Central WebAuth (CWA) on NADs1h 12m · 15 videos · 1 lab
  • Premium skill.Configure 3rd Party Redirection for CWA in ISE1h 22m · 18 videos · 1 lab
  • Premium skill.Design Guest Access with ISE1h 2m · 11 videos
  • Premium skill.Get Started with Guest Identities in ISE1h 11m · 12 videos · 1 lab
  • Premium skill.Customize Guest Types in ISE1h 1m · 12 videos · 1 lab
  • Premium skill.Configure Sponsor Groups and Other Settings1h 6m · 11 videos · 1 lab
  • Premium skill.Customize Basic Portal Settings in ISE55m · 11 videos · 1 lab
  • Premium skill.Customize Portal Registration Settings in ISE50m · 9 videos · 1 lab
  • Premium skill.Configure Advanced Portal Settings in ISE1h 14m · 15 videos · 1 lab
  • Premium skill.Configure Guest Portal Appearance1h 36m · 16 videos · 1 lab
  • Premium skill.Configure Sponsor Portal Appearance1h 9m · 13 videos · 1 lab
  • Premium skill.Configure Guest Portal Certificates54m · 8 videos · 1 lab
  • Premium skill.Configure Guest Portal Notifications1h 10m · 12 videos · 1 lab
  • Premium skill.Configure Federated Authentication for ISE Portals1h 21m · 16 videos · 1 lab
  • Premium skill.Control VPN Access with ISE1h 5m · 15 videos
  • Premium skill.Integrate ISE with Duo MFA52m · 13 videos
  • Premium skill.Design Device Administration AAA with ISE1h 10m · 15 videos
  • Premium skill.Configure Basic Device Admin Policies in ISE1h 7m · 14 videos · 1 lab
  • Premium skill.Configure Privilege Authorization in ISE1h 3m · 12 videos · 1 lab
  • Premium skill.Explore Additional Authorization Types in ISE48m · 10 videos
  • Premium skill.Build TACACS+ Command Set Rules in ISE1h 7m · 11 videos
  • Premium skill.Configure Advanced TACACS+ Features1h 17m · 13 videos · 1 lab
  • Premium skill.Configure IOS Privilege Authorization with ISE1h 23m · 14 videos · 1 lab
  • Premium skill.Configure IOS Command Authorization with ISE1h 2m · 11 videos · 1 lab
  • Premium skill.Configure WLC Authentication with ISE1h 8m · 15 videos
  • Premium skill.Describe Cisco TrustSec (CTS)1h 3m · 13 videos
  • Premium skill.Explore the Phases of CTS1h 14m · 13 videos
  • Premium skill.Explore Traditional NAD Onboarding in CTS1h 29m · 17 videos
  • Premium skill.Explore Additional NAD Configurations in CTS57m · 12 videos
  • Premium skill.Configure ISE for CTS NAD Onboarding1h 26m · 15 videos · 1 lab
  • Premium skill.Onboard IOS-XE NADs onto a CTS Domain55m · 11 videos · 1 lab
  • Premium skill.Onboard Other NAD Types onto a CTS Domain1h 10m · 11 videos · 1 lab
  • Premium skill.Create TrustSec Security Groups in ISE58m · 13 videos · 1 lab
  • Premium skill.Create TrustSec SGACL and SGFW Policies1h 29m · 17 videos · 1 lab
  • Premium skill.Create TrustSec SGT Mappings in ISE/IOS-XE52m · 10 videos · 1 lab
  • Premium skill.Configure Inline Tagging on TrustSec NADs50m · 9 videos · 1 lab
  • Premium skill.Configure TrustSec SXP in ISE1h 8m · 13 videos · 1 lab
  • Premium skill.Configure TrustSec SXP in the IOS-XE CLI53m · 9 videos · 1 lab
  • Premium skill.Configure Advanced TrustSec SXP Features1h 7m · 13 videos · 1 lab
  • Premium skill.Tune Advanced TrustSec Settings in ISE1h 27m · 14 videos · 1 lab
  • Premium skill.Verify TrustSec Deployments in ISE1h 17m · 18 videos · 1 lab
  • Premium skill.Configuring Profiling & Anomalous Behavior46m · 12 videos
  • Premium skill.RADIUS Profiling Probe & ACIDex47m · 9 videos · 1 lab
  • Premium skill.DHCP/SPAN & SNMPTRAP Probes53m · 9 videos · 1 lab
  • Premium skill.SNMPQUERY, NMAP & DNS Probes51m · 12 videos · 1 lab
  • Premium skill.NetFlow, HTTP, AD and PxGride Probes44m · 13 videos · 1 lab
  • Premium skill.Intro To ISE BYOD46m · 14 videos
  • Premium skill.Configure BYOD For Wired Endpoint Pt.144m · 12 videos
  • Premium skill.Configure BYOD For Wired Endpoint Pt.254m · 14 videos
  • Premium skill.Configure Single SSID Wireless BYOD56m · 12 videos
  • Premium skill.Configure Dual SSID Wireless BYOD50m · 12 videos
  • Premium skill.Intro To Endpoint Compliance & Posturing52m · 11 videos
  • Premium skill.Configuring Wired Posture Assessment Pt.155m · 17 videos
  • Premium skill.Configuring Wired Posture Assessment Pt.252m · 12 videos
  • Premium skill.Configuring Wireless & VPN Posture Assessment57m · 13 videos
Want to browse the locked skills?
with no purchase required. Already have an account?

An account gets you the full catalog to browse, pre-assessments, quiz questions on free skills, and IT Trainerbot, with every answer citing its source video.

Certification

CCNP Security

The CCNP Security certification validates the skills required to secure and manage network infrastructure, and to respond to security threats. It is ideal for network security engineers, security analysts, and other security professionals who want to...

Exam 350-701 SCOR, 300-710 SNCF, and 300-715 SISELevel ProfessionalDifficulty IntermediateCost Core exam: $400, Concentration exam: $300
Network security design and implementationThreat detection and mitigationNetwork infrastructure securitySecurity policy and complianceNetwork security protocols and technologies
Official certification page

Put this course to work for your team

Every subscription includes this course with the full library, virtual labs, and practice exams — or talk it through with sales.

For IT leaders

What IT leaders need to know before assigning this course

For IT leaders: A misconfigured 802.1X rollout can lock every user off the network, and unmanaged endpoints, guests, and BYOD devices widen your attack surface. This course prepares network and security teams to deploy Cisco ISE methodically: planning deployment personas and redundancy, staging 802.1X in phases, and enforcing identity-based access across wired, wireless, and VPN.

Role fit: Best for Network Engineers, Security Engineers, and IT Practitioners on the CCNP Security (300-715) track. Team Leads can also assign it to switching and routing staff who lack Active Directory or wireless experience. The environment-build series covers just enough AD, Group Policy, DHCP, and WLC setup to close that gap.

Time investment: About 99 hours across 94 skills. Plan for a multi-month pace per learner. Individual skills run roughly 45–90 minutes, so you can assign focused segments such as MAB, guest portals, TrustSec, TACACS+ device administration, or posture to match current projects.

Change management: The instruction stresses careful rollout: phased 802.1X stages, AD integration troubleshooting tools, and TrustSec staging matrices with approver workflows before production changes.

How CBT Nuggets supports it: Hands-on Virtual Labs mirror the course topology, and knowledge checks reinforce design decisions. Playlists sequence skills by role, and Team Reporting shows progress toward certification readiness.

Team Impact

How this training helps your team succeed

Network access control mistakes are expensive: as the course warns, a misconfigured 802.1X rollout can block every user from the network. IT teams complete this training to plan and run Cisco ISE deployments methodically, so security improves without creating outages or help desk spikes.

The course is built around realistic scenarios. Learners size a deployment that must keep full functionality through a complete data center failure. They build a lab with Active Directory, group policy, DHCP, switches, and a wireless controller. They also troubleshoot common mistakes, such as a disabled SSID or a switch port that should be hard-coded as a trunk.

  • Safer 802.1X rollouts: Your team learns the stages of an 802.1X deployment and the design choices for supplicants, authenticators, and ISE. This lowers the risk of locking users out during cutover.
  • Faster identity troubleshooting: Engineers use ISE's native AD test user and diagnostic tools to find authentication failures quickly instead of escalating them.
  • Tighter admin and segmentation controls: Teams build TACACS+ command sets and per-command authorization for network devices. They also apply TrustSec micro-segmentation to limit lateral threat movement and support zero trust goals.
  • Controlled change and compliance: Learners use TrustSec staging and production matrices with an approver workflow. They also configure posture conditions and requirements so only compliant endpoints get access.

The result is a team that can design, deploy, and support ISE in-house with less dependence on outside contractors.

After completion

Capabilities your team walks away with

Knowledge

  • How Cisco ISE is built, including node personas (PAN, MnT, PSN), and how small, medium, and large distributed deployments trade off scale and redundancy
  • How AAA protocols, port-based network access control, and EAP methods work across the supplicant, authenticator, and authentication server
  • How ISE policy sets, policy structure, and policy workflow drive authentication and authorization decisions
  • How ISE stores and manages endpoint identities in its internal endpoint database, in Active Directory, and in LDAP
  • Why Cisco TrustSec micro-segmentation supports zero trust and limits lateral movement of threats
  • How web authentication, guest portals, profiling probes, and posture conditions and requirements fit into an access strategy

Ability

  • Plan a phased 802.1X rollout that avoids locking users out of the network
  • Deploy ISE nodes and integrate them with Active Directory, then troubleshoot the integration with the test user and diagnostic tools
  • Configure wired and wireless 802.1X on IOS switches and Cisco WLCs, including Windows, mobile, and Cisco IP phone supplicants
  • Implement MAB, IBNS 2.0/C3PL policies, and Local and Central WebAuth for devices that can't run 802.1X
  • Build TACACS+ command sets and test per-command authorization for device administrators
  • Create wired posture policies and stage TrustSec matrix changes before pushing them to production

Readiness check

Confirm prerequisite knowledge before training begins

A short placement assessment on the CBT Nuggets assessments platform measures whether a learner already has the foundation this course assumes. IT leaders use it to put the right people in the right training — and any learner can take it right now to make sure they'll get full value from day one.

  • Questions generated from this course's own video transcripts — what gets measured is exactly what gets taught
  • Instant, per-learner results that show whether the prerequisite foundation is in place
  • Results roll up into team readiness reporting, so training hours go where they change outcomes
Runs on assessments.cbtnuggets.com — sign in with an Adept account so results roll up into team readiness reporting. Need one?
.

If gaps show up, start here

CCNA Cisco Certified Network Associate (200-301 CCNA v1.1)

This Cisco CCNA training fully prepares you for the 200-301 v1.1 exam — and to earn your Cisco Certified Network Associate certification. Master core network fundamentals, IP connectivity, VLAN configuration, routing protocols (OSPF, static), LAN swi...

~94h

This course is included with every plan

Unlock this one course, or get one learner — or your whole team — access to all 295 courses, virtual labs, and practice exams.

Course Unlock

Just need this course?

$225one time

No subscription

One year of access to Cisco CCNP ISE (300-715 SISE)

  • Every skill in this course
  • Its virtual labs and practice exam
  • Ask IT Trainerbot about it — free

CBT Nuggets Individual

Includes IT Trainerbot Plus

$49per month

Billed annually

Every course, for one learner

See Individual pricing
For IT teams

CBT Nuggets Teams

IT Trainerbot for every seat

$59per seat / mo

Billed annually

From 1 learner seat · unlimited admin seats

Checking your access…

Frequently Asked Questions

Which certification does this Cisco ISE course prepare my team for?

The course maps to the 300-715 SISE v1.2 exam, a concentration exam for the CCNP Security certification. Cisco issues the certification, and CBT Nuggets prepares your team for the exam.

Which roles on my team should I assign this course to?

It is designed for Network Engineers, Security Engineers, and IT practitioners responsible for network access control and identity-based policy. Team Leads can also assign it to switching and routing staff who lack Active Directory or wireless experience, because the environment-build series covers enough AD, Group Policy, DHCP, and WLC setup to close that gap.

How much time should I plan per learner?

The course runs about 99 hours across 94 skills, so plan for a multi-month pace per learner. Individual skills run roughly 45 to 90 minutes, which lets you assign focused segments such as MAB, guest portals, TrustSec, TACACS+, or posture to match current projects.

What hands-on practice does the course include?

Virtual labs mirror the course topology, and knowledge checks reinforce design decisions. Learners build a lab with Active Directory, Group Policy, DHCP, switches, and a wireless controller, then troubleshoot common mistakes such as a disabled SSID or a switch port that should be hard-coded as a trunk.

How does this training support change control and compliance?

The instruction stresses careful rollout, including phased 802.1X stages, TrustSec staging and production matrices with an approver workflow, and posture requirements that limit access to compliant endpoints. Team reporting gives managers per-learner progress, completion, and completion exports for audit evidence.

Ready to upskill your team?

See how IT leaders fit this course into a team training plan, and what a plan costs for your team's size.