IT Infrastructure & Networks Category Banner Image

Cisco DoD Comply-to-Connect (C2C)

Length 5 days
Version 1.0

Course overview

View dates &
book now

Course locations >>

Why study this course

This five-day course teaches you how to implement and deploy a Department of Defense (DoD) Comply-to-Connect network architecture using Cisco Identity Services Engine (ISE). This training covers implementation of 802.1X for both wired and wireless devices and how Cisco ISE uses that information to apply policy control and enforcement.

Additionally, other topics like supplicants, non-supplicants, ISE profiler, authentication, authorisation, and accounting (AAA) and public key infrastructure (PKI) support, reporting and troubleshooting are covered. Finally, C2C specific use case scenarios are covered.

Digital courseware: Cisco provides students with electronic courseware for this course. Students who have a confirmed booking will be sent an email prior to the course start date, with a link to create an account via learningspace.cisco.com before they attend their first day of class. Please note that any electronic courseware or labs will not be available (visible) until the first day of the class.

Exam Vouchers: Cisco exam vouchers are not included in the course fees but can be purchased separately where applicable.

Request Course Information

What you’ll learn

After taking this course, you should be able to:

Define DoD C2C, including its steps and alignment with ISE features/functions and Zero Trust
Describe Cisco Identity-Based Networking Services
Describe the Cisco Identity Services Engine
Explain Cisco ISE deployment
Describe Cisco ISE policy enforcement components
Describe Cisco ISE policy configuration
Explain PKI fundamentals, technology, components, roles, and software supplicants
Describe the Cisco ISE profiler service
Configure endpoint compliance
Configure client posture services
Describe profiling best practices and reporting
Describe the four main use cases within C2C
Troubleshoot Cisco ISE policy and third-party NAD support
Describe Cisco ISE TrustSec configurations
Configure Cisco ISE device administration

Cisco at Lumify Work

Lumify Work is the largest provider of authorised Cisco training in Australia, offering a wider range of Cisco courses, run more often than any of our competitors. Lumify Work has won awards such as ANZ Learning Partner of the Year (twice!) and APJC Top Quality Learning Partner of the Year.

View all Cisco courses

Who is the course for?

This training is a Department of Defense mandate, ensuring compliance with cybersecurity protocols and procedures. The target audience includes individuals seeking the knowledge and skills involved in deploying, operating, and verifying Cisco DoD C2C network architecture, such as:

Network Security Engineers
Network Administrators
Security Administrators

Course subjects

C2C Fundamentals
Cisco Identity-Based Networking Services
Introducing Cisco ISE Architecture
Introducing Cisco ISE Deployment
Introducing Cisco ISE Policy Enforcement Components
Introducing Cisco ISE Policy Configuration
PKI and Advanced Supplicants
Introducing the Cisco ISE Profiler
Introducing Cisco ISE Endpoint Compliance Services
Configuring Client Posture Services and Compliance
Introducing Profiling Best Practices and Reporting
C2C Use Cases
Troubleshooting Cisco ISE Policy and Third-Party NAD Support
Exploring Cisco TrustSec
Working with Network Access Devices

Lab Outline

Configure Initial Cisco ISE Configuration and System Certificate Usage
Integrate Cisco ISE with Active Directory
Configure Cisco ISE Policy for MAB
Configure Cisco ISE Policy for 802.1X
TEAP on Windows
Configure Profiling
Customise the Cisco ISE Profiling Configuration
Configure Cisco ISE Compliance Services
Configure Client Provisioning
Configure Posture Policies
Test and Monitor Compliance-Based Access
Create Cisco ISE Profiling Reports
DISA Reports
Certificate-Based Authentication for Cisco ISE Administration
Configure Cisco TrustSec
Configure Cisco ISE for Basic Device Administration
Configure Cisco ISE Command Authorisation

Prerequisites

There are no prerequisites for this training. However, the knowledge and skills you are recommended to have before attending this training are:

Familiarity with 802.1X
Familiarity with Microsoft Windows Operating Systems
Familiarity with Cisco IOS CLI for wired and wireless network devices
Familiarity with Cisco Identity Service Engine

The following recommended Cisco offering may help you meet these prerequisites:

Implementing and Configuring Cisco Identity Services Engine (SISE)

Downloads

Cisco Learning Credits Brochure

Terms & Conditions

The supply of this course by Lumify Work is governed by the booking terms and conditions. Please read the terms and conditions carefully before enrolling in this course, as enrolment in the course is conditional on acceptance of these terms and conditions.