-
![[Day 31] Cisco ISE Mastery Training: Wired Posture Assessment Overview](https://networkjourney.com/wp-content/uploads/2025/08/Day-31-–-Cisco-ISE-Mastery-Training-Wired-Posture-Assessment-Overview-1.png)
[Day 31] Cisco ISE Mastery Training: Wired Posture Assessment Overview
Introduction Wired networks have historically been perceived as more secure than wireless due to their physical nature — you have to “plug in” to access them. However, this illusion of safety has been shattered by insider threats, rogue devices, and BYOD culture. Cisco Identity Services […]
-
![[Day 30] Cisco ISE Mastery Training: Integrating a Syslog Server for Log Management](https://networkjourney.com/wp-content/uploads/2025/08/Day-30-of-150-Cisco-ISE-Mastery-Training-Integrating-Syslog-Server-for-Log-Management.png)
[Day 30] Cisco ISE Mastery Training: Integrating a Syslog Server for Log Management
Introduction Logs are the telemetry heartbeat of any NAC deployment. Cisco ISE produces detailed authentication, authorization and system events — but to operate, audit and investigate at scale you must centralize those logs on a syslog/SIEM platform. Integrating a syslog server lets you: This lesson […]
-
![[Day 29] Cisco ISE Mastery Training: Using Reports for Wired Authentication Analysis](https://networkjourney.com/wp-content/uploads/2025/08/Day-29-of-150-Cisco-ISE-Mastery-Training-Using-Reports-for-Wired-Auth-Analysis.png)
[Day 29] Cisco ISE Mastery Training: Using Reports for Wired Authentication Analysis
Introduction Reports are where data becomes insight. Cisco ISE collects massive amounts of authentication and endpoint telemetry — Live Logs are great for one-off troubleshooting, but reports let you analyze trends, measure SLA/uptime, quantify authentication failure causes, spot rogue devices, and produce audit evidence for […]
-
![[Day 28] Cisco ISE Mastery Training: Syslog & Live Logs for Wired Authentication Debugging](https://networkjourney.com/wp-content/uploads/2025/08/Day-28-Cisco-ISE-Mastery-Training-Syslog-_Live-Logs-for-Wired-Authentication-Debugging.png)
[Day 28] Cisco ISE Mastery Training: Syslog & Live Logs for Wired Authentication Debugging
Introduction When a wired user “can’t get online,” your two most powerful sources of truth are: Used together and correlated by time, MAC, username, port, syslogs + ISE Live Logs let you pinpoint root causes quickly — whether it’s a credential issue, identity source failure, […]
-
![[Day 27] Cisco ISE Mastery Training: Advanced Wired Authentication Troubleshooting](https://networkjourney.com/wp-content/uploads/2025/08/Day-27-of-150-Cisco-ISE-Mastery-Training-Advanced-Wired-Authentication-Troubleshooting.png)
[Day 27] Cisco ISE Mastery Training: Advanced Wired Authentication Troubleshooting
Introduction Wired authentication problems are the most visible and disruptive NAC issues — users plug in and don’t get network access. Advanced troubleshooting for wired authentication requires a disciplined, methodical approach: reproduce the problem, collect the right evidence (switch CLI, packet captures, and ISE Live […]
-
![[Day 26] Cisco ISE Mastery Training: Using Profiling for Wired Endpoints](https://networkjourney.com/wp-content/uploads/2025/08/Day-26-of-150-Cisco-ISE-Mastery-Training-Using-Profiling-for-Wired-Endpoints.png)
[Day 26] Cisco ISE Mastery Training: Using Profiling for Wired Endpoints
Introduction Profiling is the process by which Cisco ISE automatically identifies the type of device (Windows PC, IP phone, printer, IoT camera, game console, etc.) that connects to your network by observing network behaviour and attributes (DHCP, RADIUS, HTTP, SNMP, NetFlow, ARP, MAC OUI, etc.). […]
-
![[Day 24] Cisco ISE Mastery Training: Implementing Downloadable ACLs (DACLs)](https://networkjourney.com/wp-content/uploads/2025/08/Day-24-–-Cisco-ISE-Mastery-Training-Implementing-Downloadable-ACLs-DACLs.png)
[Day 24] Cisco ISE Mastery Training: Implementing Downloadable ACLs (DACLs)
Introduction – The Power of Downloadable ACLs in Cisco ISE In modern enterprise networks, security is no longer about simply deciding who gets access — it’s also about controlling what they can do after they get access. This is where Downloadable ACLs (DACLs) in Cisco […]
-
![[Day 25] Cisco ISE Mastery Training: Dynamic VLAN Assignment in Wired Networks](https://networkjourney.com/wp-content/uploads/2025/08/Day-25-Cisco-ISE-Mastery-Training-Dynamic-VLAN-Assignment-in-Wired-Networks.png)
[Day 25] Cisco ISE Mastery Training: Dynamic VLAN Assignment in Wired Networks
Introduction Dynamic VLAN Assignment (DVA) is a cornerstone capability in Cisco Identity Services Engine (ISE) deployments for wired networks. In traditional environments, VLANs are statically configured on switch ports — meaning every port is tied to a single network segment regardless of who plugs in. […]
-
![[Day 23] Cisco ISE Mastery Training: Guest VLAN & Critical VLAN Configuration](https://networkjourney.com/wp-content/uploads/2025/08/Day-23-Cisco-ISE-Mastery-Training-Guest-VLAN-Critical-VLAN-Configuration.png)
[Day 23] Cisco ISE Mastery Training: Guest VLAN & Critical VLAN Configuration
Introduction In enterprise networks, wired access security using 802.1X or MAB can occasionally fail due to endpoint configuration issues, missing certificates, or network downtime. When authentication fails, what happens to the user or device? Without proper handling, devices may be completely cut off from the […]
-
![[Day 22] Cisco ISE Mastery Training: MAB (MAC Authentication Bypass) Configuration](https://networkjourney.com/wp-content/uploads/2025/08/Day-22-Cisco-ISE-Mastery-Training-MAB-MAC-Authentication-Bypass-Configuration.png)
[Day 22] Cisco ISE Mastery Training: MAB (MAC Authentication Bypass) Configuration
Introduction MAC Authentication Bypass (MAB) lets network devices authenticate endpoints by their MAC address when 802.1X fails or isn’t possible (non-802.1X devices such as printers, IP phones, cameras, unmanaged endpoints). In Cisco ISE deployments, MAB is commonly used as a fallback to 802.1X or as […]
