Cisco ISE for BYOD and Secure Unified Access (2nd Edition) (Networking Technology: Security) / Aaron Woland, Jamey Heary

Fully updated: The complete guide to Cisco Identity Services Engine solutions

Using Cisco Secure Access Architecture and Cisco Identity Services Engine, you can secure and gain control of access to your networks in a Bring Your Own Device (BYOD) world.

This second edition of Cisco ISE for BYOD and Secure Unified Accesscontains more than eight brand-new chapters as well as extensively updated coverage of all the previous topics in the first edition book to reflect the latest technologies, features, and best practices of the ISE solution. It begins by reviewing today s business case for identity solutions. Next, you walk through ISE foundational topics and ISE design. Then you explore how to build an access security policy using the building blocks of ISE. Next are the in-depth and advanced ISE configuration sections, followed by the troubleshooting and monitoring chapters. Finally, we go in depth on the new TACACS+ device administration solution that is new to ISE and to this second edition.

With this book, you will gain an understanding of ISE configuration, such as identifying users, devices, and security posture; learn about Cisco Secure Access solutions; and master advanced techniques for securing access to networks, from dynamic segmentation to guest access and everything in between.

Drawing on their cutting-edge experience supporting Cisco enterprise customers, the authors offer in-depth coverage of the complete lifecycle for all relevant ISE solutions, making this book a cornerstone resource whether you re an architect, engineer, operator, or IT manager.

Review evolving security challenges associated with borderless networks, ubiquitous mobility, and consumerized IT

Understand Cisco Secure Access, the Identity Services Engine (ISE), and the building blocks of complete solutions

Design an ISE-enabled network, plan/distribute ISE functions, and prepare for rollout

Build context-aware security policies for network access, devices, accounting, and audit

Configure device profiles, visibility, endpoint posture assessments, and guest services

Implement secure guest lifecycle management, from WebAuth to sponsored guest access

Configure ISE, network access devices, and supplicants, step by step

Apply best practices to avoid the pitfalls of BYOD secure access

Set up efficient distributed ISE deployments

Provide remote access VPNs with ASA and Cisco ISE

Simplify administration with self-service onboarding and registration

Deploy security group access with Cisco TrustSec

Prepare for high availability and disaster scenarios

Implement passive identities via ISE-PIC and EZ Connect

Implement TACACS+ using ISE

Monitor, maintain, and troubleshoot ISE and your entire Secure Access system

Administer device AAA with Cisco IOS, WLC, and Nexus