Cisco ISE & Zero Trust NAC — End-to-End Deployment

About the Course

Design and deploy a production-grade Zero Trust network access control (NAC) environment using Cisco ISE. This course covers 802.1X wired/wireless authentication, RADIUS and TACACS+ administration, TrustSec SGT/SGACL segmentation, MAB, posture assessment, guest access workflows, and pxGrid integration with Palo Alto NGFW for context-sharing. Based on real enterprise ISE deployments.

You Will be Able to know:

By the end of this course, you will have production-ready skills in Cisco ISE & Zero Trust NAC. You will be confident designing, deploying, and troubleshooting real-world enterprise network environments.

• Deploy Cisco ISE nodes in distributed, high-availability cluster configurations

• Configure 802.1X wired and wireless authentication with certificate and credential-based policies

• Implement TrustSec with Security Group Tags (SGTs) and SGACLs for micro-segmentation

• Build posture assessment policies to enforce endpoint compliance before granting access

• Integrate ISE with Palo Alto NGFW via pxGrid for dynamic security policy enforcement

Prerequisite:

• Understanding of 802.1X, RADIUS, and AAA concepts

• Cisco switching knowledge (access ports, trunking, VLANs) at CCNP level

• Basic familiarity with PKI and digital certificates is beneficial

Who Is This Course For?

• Security engineers implementing Zero Trust access control for enterprise campuses

• Network engineers responsible for NAC, guest access, and endpoint compliance

• Engineers preparing for the Cisco SISE (300-715) certification exam

Certification Alignment

Prepares for Cisco SISE (300-715)