Introduction Network devices (switches, wireless controllers, routers, firewalls) are the RADIUS clients that ask Cisco ISE who can access the network. Adding them to ISE properly — with the right IPs, shared secrets, device groups and attributes — is essential for accurate policy enforcement, logging, […]
![[Day 7] Cisco ISE Mastery Training: Configuring Certificates (Self-Signed & CA-Signed)](https://networkjourney.com/wp-content/uploads/2025/08/Day-7-Cisco-ISE-Mastery-Training-Configuring-Certificates-Self-Signed-CA-Signed.png)
Introduction TLS certificates are the backbone of secure ISE operations — they authenticate the ISE Admin GUI and portals, secure EAP/RADIUS server identity for wireless/wired 802.1X, enable pxGrid trust, and sign SAML assertions. A wrong certificate, missing CA chain, or expired cert will break 802.1X, […]
![[Day 6] Cisco ISE Mastery Training: Initial Setup Wizard & GUI Tour](https://networkjourney.com/wp-content/uploads/2025/08/Day-6-Cisco-ISE-Mastery-Training-Initial-Setup-Wizard-GUI-Tour.png)
Introduction You’ve deployed the ISE appliance — now what? The Initial Setup Wizard and the first GUI tour are the make-or-break steps that transform a running VM into a usable NAC controller. This session walks you through the exact steps to complete first-boot configuration, secure […]
![[Day 5] Cisco ISE Mastery Training: Installing Cisco ISE in VMware ESXi / EVENG](https://networkjourney.com/wp-content/uploads/2025/08/Day-5-Cisco-ISE-Mastery-Training-Installing-Cisco-ISE-in-VMware-ESXi-EVENG.png)
Introduction This session shows you how to deploy Cisco Identity Services Engine (ISE) in a lab environment using VMware ESXi (vSphere client) and EVE-NG. Installing ISE correctly matters because ISE is the enforcement and policy brain for NAC — mis-provisioned VMs, wrong disk types, or […]
![[Day 9] Cisco ISE Mastery Training: Creating Internal Users & Groups](https://networkjourney.com/wp-content/uploads/2025/08/Day-9-Cisco-ISE-Mastery-Training-Creating-Internal-Users-Groups.png)
Introduction Internal users and groups in Cisco ISE let you authenticate accounts that are maintained inside ISE itself rather than in Active Directory. This is vital for: Today you’ll learn how to create internal users and groups, import users in bulk, add them to Identity […]
![[Day 8] Cisco ISE Mastery Training: Integrating ISE with Active Directory](https://networkjourney.com/wp-content/uploads/2025/08/Day-8-Cisco-ISE-Mastery-Training-Integrating-ISE-with-Active-Directory.png)
Introduction Active Directory (AD) is the source of truth for user identities in most enterprises. Integrating Cisco ISE with AD lets ISE make real-time decisions based on user identity and group membership — mapping AD groups to network access policies, applying departmental VLANs, or enabling […]
![[Day 4] Cisco ISE Mastery Training: Lab Topology Design for ISE Practice](https://networkjourney.com/wp-content/uploads/2025/08/Day-4-Cisco-ISE-Mastery-Training-Lab-Topology-Design-for-ISE-Practice_networkjourney.png)
Introduction In today’s enterprise networks, controlling who and what connects is no longer optional — it’s a security necessity.Cisco Identity Services Engine (ISE) is the gold standard for Network Access Control (NAC), enabling centralized authentication, authorization, and accounting for wired and wireless devices. This Day […]
