Cisco ISE for BYOD and Secure Unified Access by Aaron Woland (English) Paperback

Description: Cisco ISE for BYOD and Secure Unified Access by Aaron Woland, Jamey Heary Using Cisco Secure Access Architecture and Cisco Identity Services Engine, you can secure and gain control of access to your networks in a Bring Your Own Device (BYOD) world. This edition of Cisco ISE for BYOD and Secure Unified Access contains more than eight brand-new chapters as well as extensively updated coverage of all the previous topics in the first edition book to reflect the latest technologies, features, and best practices of the ISE solution. It begins by reviewing todays business case for identity solutions. Next, you walk through ISE foundational topics and ISE design. Then you explore how to build an access security policy using the building blocks of ISE. Next are the in-depth and advanced ISE configuration sections, followed by the troubleshooting and monitoring chapters. Finally, we go in depth on the new TACACS+ device administration solution that is new to ISE and to this second edition. With this book, you will gain an understanding of ISE configuration, such as identifying users, devices, and security posture; learn about Cisco Secure Access solutions; and master advanced techniques for securing access to networks, from dynamic segmentation to guest access and everything in between. FORMAT Paperback LANGUAGE English CONDITION Brand New Author Biography Aaron Woland, CCIE No. 20113, is a Principal Engineer in Ciscos Security Group and works with Ciscos largest customers all over the world. His primary job responsibilities include Secure Access and Identity deployments with ISE, solution enhancements, standards development, Advanced Threat Security and solution futures. Aaron joined Cisco in 2005 and is currently a member of numerous security advisory boards and standards body working groups. Prior to joining Cisco, Aaron spent 12 years as a consultant and technical trainer. His areas of expertise include network and host security architecture and implementation, regulatory compliance, and route-switch and wireless. Aaron is the author of many Cisco white papers and design guides and is co-author of CCNP Security SISAS 300-208 Official Cert Guide; Cisco Next-Generation Security Solutions: All-in-one Cisco ASA Firepower Services, NGIPS, and AMP; and CCNA Security 210-260 Complete Video Course. Aaron is one of only five inaugural members of the Hall of Fame Elite for Distinguished Speakers at Cisco Live, and is a security columnist for Network World, where he blogs on all things related to secure network access. His other certifications include GHIC, GSEC, Certified Ethical Hacker, MCSE, VCP, CCSP, CCNP, CCDP, and many other industry certifications. You can follow Aaron on Twitter: @aaronwoland. Jamey Heary, CCIE No. 7680, is a Distinguished Systems Engineer at Cisco Systems, where he leads the Global Security Architecture Team, GSAT. Jamey and his GSAT team work as trusted security advisors and architects to Ciscos largest customers worldwide. Jamey sits on the PCI Security Standards Councils Board of Advisors, where he provides strategic and technical guidance for future PCI standards. Jamey is the author of Cisco NAC Appliance: Enforcing Host Security with Clean Access. He also has a patent on a new DDoS mitigation and firewall IP reputation technique. Jamey blogged for many years on Network Worldon security topics and is a Cisco Live Distinguished Speaker. Jamey sits on numerous security advisory boards for Cisco Systems and was a founding member of several Cisco security customer user groups across the United States. His other certifications include CISSP, and he is a Certified HIPAA Security Professional. He has been working in the IT field for 24 years and in IT security for 20 years. You can contact Jamey at . Table of Contents Introduction Section I: Identity Enabled Network: Unite! Chapter 1: Fundamentals of AAA Chapter 2: The Evolution of Network Access Chapter 3: Introducing Cisco Secure Access and the Identity Services Engine Section II: The Blueprint, Designing an ISE Enabled Network Chapter 3: What are the building blocks in ISE Design? Chapter 4: Making Sense of all the ISE Design Options Chapter 5: The Basics: Principal Configuration Tasks for ISE Section III: The Foundation, Building a Context-Aware Security Policy Chapter 6: Creating Authentication and Authorization Policies Chapter 7: Building a Device Security Policy Chapter 8: Building an Accounting and Audit Policy Section IV: Lets Configure Chapter 9: Profiling Basics and Initial Configuration Chapter 10: Bootstrapping Network Access Devices Chapter 11: The Building Blocks: Roles and Authorization Results Chapter 12: Authentication and Authorization Policies Chapter 13: Guest Lifecycle Management Chapter 14: Device Posture Assessments Chapter 15: Supplicant Configuration Chapter 16: BYOD: Self Service Onboarding and Registration Chapter 17: Setting up a Distributed ISE Deployment Chapter 18: Remote Access VPN with ASA and Cisco ISE Chapter 19: Deploying in Phases Section V: Advanced Secure Access Features Chapter 20: Advanced Profiling Configuration Chapter 21: Cisco TrustSec AKA:Security Group Access Chapter 22: High Availability & Disaster Scenario Chapter 23: ISE Ecosystems: the platform exchange Grid Section VI: Monitoring, Maintenance, and Troubleshooting for Network Access AAA Chapter 24: Understanding Monitoring and Alerting Chapter 25: Troubleshooting Chapter 26: Backup, Upgrading Section VII: Device Administration Chapter 27: Device Admin AAA Fundamentals & Design Long Description Fully updated: The complete guide to Cisco Identity Services Engine solutions Using Cisco Secure Access Architecture and Cisco Identity Services Engine, you can secure and gain control of access to your networks in a Bring Your Own Device (BYOD) world. This second edition of Cisco ISE for BYOD and Secure Unified Access contains more than eight brand-new chapters as well as extensively updated coverage of all the previous topics in the first edition book to reflect the latest technologies, features, and best practices of the ISE solution. It begins by reviewing todays business case for identity solutions. Next, you walk through ISE foundational topics and ISE design. Then you explore how to build an access security policy using the building blocks of ISE. Next are the in-depth and advanced ISE configuration sections, followed by the troubleshooting and monitoring chapters. Finally, we go in depth on the new TACACS+ device administration solution that is new to ISE and to this second edition. With this book, you will gain an understanding of ISE configuration, such as identifying users, devices, and security posture; learn about Cisco Secure Access solutions; and master advanced techniques for securing access to networks, from dynamic segmentation to guest access and everything in between. Drawing on their cutting-edge experience supporting Cisco enterprise customers, the authors offer in-depth coverage of the complete lifecycle for all relevant ISE solutions, making this book a cornerstone resource whether youre an architect, engineer, operator, or IT manager. Feature Implement state-of-the-art identity-based security with Cisco Trusted Security and Identity Services Engine Covers pioneering Cisco products in one of todays fastest-growing security categories Shows how to differentiate network access based on device types, user attributes, or location Includes step-by-step wired and wireless configurations Shows how to configure device profiling, endpoint posture assessments, and guest services Demonstrates enforcement via dynamic VLAN assignment, downloadable ACLs, and Secure Group Access/Secure Group Tags New Feature Revision 1 of Cisco ISE for BYOD and Secure Unified Access is based on a pre-release version of ISE 1.2. Since the publishing of the first revision, ISE and Secure Unified Access have undergone many enhancements that customers are looking for. * Addition of TACACS+ and Device Administration Support o Now Cisco ISE is truly a replacement for Cisco ACS, as it is covering both main types of AAA: Network Access & Device Administration o Cisco ISE designs will be very different * Complete re-write of Guest Services o One of the main functions of ISE for network access has been to provide the full lifecycle of Guest management. o That Guest management has been completely re-imagined from the ground-up, and differs from what was covered in revision-1 of the ISE book entirely. o New BYOD Portals, new Guest Types, Sponsor-rewrite & new flows. * Admin Fail-Over o Failover capabilities have been enhanced for automatic failover * Built-in Certificate Authority o Issuing certificates, cert templates, OCSP services * Posture Enhancements o AnyConnect 4.0 as Posture Agent * Multiple MDM o Off-Prem MDM Onboarding * pxGrid o Scalable communication bus for sharing security information * Licensing re-write * Enhanced Troubleshooting and Serviceability Tooling * New Appliance Options o OVA templates * Authentication Enhancements o EAP-TTLS o TEAP (EAP-Chaining / RFC7170) o Onboarding w/ RADIUS Proxy * IBNS 2.0 o Enhancement to Cisco Access Switches that leverages the Cisco Common Classification Policy Language (C3PL). This provides tremendous flexibility in the handling of policy, failure scenarios, and is configured very differently. * Differentiated access: Details ISBN1587144735 Author Jamey Heary Year 2017 ISBN-10 1587144735 ISBN-13 9781587144738 Format Paperback Media Book Publisher Pearson Education (US) Edition 2nd Imprint Cisco Press Place of Publication Indianapolis Country of Publication United States Replaces 9781587143250 DEWEY 005.8 Pages 912 Language English Series Networking Technology: Security AU Release Date 2017-08-10 NZ Release Date 2017-08-10 US Release Date 2017-08-10 Publication Date 2017-08-10 UK Release Date 2017-08-10 Edition Description 2nd edition Audience Professional & Vocational We've got this At The Nile, if you're looking for it, we've got it. With fast shipping, low prices, friendly service and well over a million items - you're bound to find what you want, at a price you'll love! TheNile_Item_ID:100736227;

Price: 94.41 AUD

Location: Melbourne

End Time: 2024-11-12T15:06:25.000Z

Shipping Cost: 23.5 AUD