Cisco ISE Deployment SOW
Statement of Work
FireOwls will install Cisco ISE server and configure 802.1x on 50 production access switches.
Integration Guidelines
Define High Level Design
- Discuss administration policies
- Discuss client authentication policies (username/certificate)
- Discuss AD groups and roles (employees, vendors, contractors, guests, etc)
Critical Access Control List
- Discuss 802.1x Authentication policy protocols
- Discuss authentication methodologies & certificate requirements
- Create deployment of 802.1x supplicant/certificate to endpoint devices
Install ISE servers configured for HA
- Deploy (2) ISE servers in Primary DC in HA mode
- Configure mode – Admin Node, Monitor Node, and Policy Service Node (PSN),
- Deploy optional redundant set of (2) servers in a Secondary DC
- Configure mode – Admin Node, Monitor Node, and Policy Service Node (PSN)
- Integrate with Active Directory
Configuring ISE Policies
- Configure Policy Sets
- Create up to 5 Policy Sets
- Configure Authentication Policies
- Create up to 5 Authentication policies
- Create MAB list and policies
