IT Infrastructure & Networks Category Banner Image

Cisco DoD Comply-to-Connect (C2C)

Length 5 days
Version 1.2

Course overview

View dates &
book now

Why study this course

The Cisco DoD Comply-to-Connect (C2C) course teaches you how to implement and deploy a Department of Defense (DoD) Comply-to-Connect network architecture using Cisco Identity Services Engine (ISE). This training covers implementation of 802.1X for both wired and wireless devices and how Cisco ISE uses that information to apply policy control and enforcement.

Additionally, other topics like supplicants, non-supplicants, ISE profiler, authentication, authorization, and accounting (AAA) and public key infrastructure (PKI) support, reporting and troubleshooting are covered. Finally, C2C specific use case scenarios are covered.

This training also earns you 32 Continuing Education (CE) credits toward recertification.

Cisco Learning Credits: Use your Cisco Learning Credits (CLC's) for training and certification with Lumify and let's work together to increase your skills and capabilities. Nominate Lumify as your TRUSTED LEARNING PARTNER through your Cisco Team Captain to allow Lumify to better help you in your Cisco training journey

Exam Vouchers: Cisco exam vouchers are not included in the course fees but can be purchased separately where applicable.

Request Course Information

What you’ll learn

After taking this course, you should be able to:

Define DoD C2C, including its steps and alignment with ISE features/functions and Zero Trust
Describe Cisco Identity-Based Networking Services
Describe the Cisco Identity Services Engine
Explain Cisco ISE deployment
Describe Cisco ISE policy enforcement components
Describe Cisco ISE policy configuration
Explain PKI fundamentals, technology, components, roles, and software supplicants
Describe the Cisco ISE profiler service
Configure endpoint compliance
Configure client posture services
Describe profiling best practices and reporting
Describe the four main use cases within C2C
Explain the purpose and the configuration of integrating Cisco ISE with Tenable
Describe the purpose and benefits of integrating Cisco ISE with MECM
Describe the purpose and benefits of integrating Cisco ISE with Trellix
Troubleshoot Cisco ISE policy and third-party NAD support
Describe Cisco ISE TrustSec configurations
Configure Cisco ISE device administration

Cisco at Lumify Work

Lumify Work is the largest provider of authorised Cisco training in Australia, offering a wider range of Cisco courses, run more often than any of our competitors. Lumify Work has won awards such as ANZ Learning Partner of the Year (twice!) and APJC Top Quality Learning Partner of the Year.

View all Cisco at Lumify Work courses

Who is the course for?

This training is a Department of Defense mandate, ensuring compliance with cybersecurity protocols and procedures. The target audience includes individuals seeking the knowledge and skills involved in deploying, operating, and verifying Cisco DoD C2C network architecture, such as:

Network Security Engineers
Network Administrators
Security Administrators

Course subjects

C2C Fundamentals
Cisco Identity-Based Networking Services
Introducing Cisco ISE Architecture
Introducing Cisco ISE Deployment
Introducing Cisco ISE Policy Enforcement Components
Introducing Cisco ISE Policy Configuration
PKI and Advanced Supplicants
Introducing the Cisco ISE Profiler
Introducing Cisco ISE Endpoint Compliance Services
Configuring Client Posture Services and Compliance
Introducing Profiling Best Practices and Reporting
C2C Use Cases
C2C Splunk Dashboards & Reporting
C2C Third-Party Integrations—Tenable
C2C Third-Party Integrations—MECM
C2C Third-Party Integrations—Trellix
Troubleshooting Cisco ISE Policy and Third-Party NAD Support
Exploring Cisco TrustSec
Working with Network Access Devices

Lab Outline

Initial Configuration and Certificate Usage
Integrate Cisco ISE with Active Directory
AAA Policy for MAB
AAA Policy for 802.1X
TEAP on Windows
Cisco ISE Profiling Configuration
Profiling Customisation
Cisco ISE Compliance Services
Client Provisioning
Posture Policies
Compliance-Based Access
Profiling Reports
Certificate-Based Authentication for Cisco ISE Administration
C2C Capstone Discovery
Cisco ISE to Tenable Integration Simulation
Cisco ISE to MECM Integration Simulation
Cisco ISE to Trellix Integration Simulation
Cisco TrustSec
TACACS+ Basic Device Administration
TACACS+ Command Authorisation

Prerequisites

There are no prerequisites for this training. However, the knowledge and skills you are recommended to have before attending this training are:

Familiarity with 802.1X
Familiarity with Microsoft Windows Operating Systems
Familiarity with Cisco IOS CLI for wired and wireless network devices
Familiarity with Cisco Identity Service Engine

The following recommended Cisco offering may help you meet these prerequisites:

Implementing and Configuring Cisco Identity Services Engine (SISE)

Cisco e-Learning

Cisco U. subscriptions and Cisco authorised e-learning courses are now available.

Learn more

Downloads

Cisco Learning Credits Brochure

Terms & Conditions

The supply of this course by Lumify Work is governed by the booking terms and conditions. Please read the terms and conditions carefully before enrolling in this course, as enrolment in the course is conditional on acceptance of these terms and conditions.