Live Cisco CCNP Security Certification Training Course

Guaranteed to Run

Upcoming Dates	Class Times	Class Format	Quote
12/7 - 12/18, 2026	10:00 AM - 6:00 PM ET 9:00 AM - 5:00 PM CT 7:00 AM - 3:00 PM PT 4:00 AM - 12:00 PM HT	Instructor-Led	Instant Quote
	Self-Paced	Online Self-Study	Instant Quote

Online Self-Study courses allow you to study around your busy schedule, remain working as you train, work at your own pace.

Instructor-Led

• Cisco Official Courseware
• Cisco Official Labs
• Lifetime access to Courseware
• Practice and Certification exam(s) (with exam pass guarantee)

If you aren't successful with your first attempt at the exam, we have an exam pass guarantee.

You may re-sit the course in its entirety for an additional exam voucher for up to 6 months (must provide proof of a failed exam for an additional exam voucher).

Instant Quote

Online Self-Study

• Cisco Official Courseware
• Cisco Official Labs
• Lifetime access to Courseware
• Labs are available for 6 months from date of redemption
• Apply Cost to Instructor-led Training of Same Course

Instant Quote

Can't travel or you want to stay with your family or business. No problem!

Stay in your own city and save the additional expenses of roundtrip airfare, lodging, transportation, and meals and receive the same great instruction live from our instructors in our Live Instructor-Led Remote Classroom Training.

Remote Classroom Training

Our Remote Classroom Training is a live class with students observing the instructor and listening through your computer speakers.

You will see the instructor's computer, slides, notes, etc., just like in the classroom. You will be following along, doing work, labs, and individual assignments.

CED Solutions Rewards Points Program

"The CCNP class was exciting and informative. My experience helped me through this class and was worth the expense."

-Wintino Jones, Philadelphia, PA

Cisco Certified Network Professional Security (CCNP Security) certification program is aligned specifically to the job role of the Cisco Network Security Engineer responsible for Security in Routers, Switches, Networking devices and appliances, as well as choosing, deploying, supporting and troubleshooting Firewalls, VPNS, and IDS/IPS solutions for their networking environments.

The new CCNP Security certification program prepares you for today's professional-level job roles in security technologies. CCNP Security now includes automation and programmability to help you scale your security infrastructure.

• Implementing and Operating Cisco Security Core Technologies (SCOR 350-701)
• Implementing and Configuring Cisco Identity Services Engine (SISE 300-715 v1.1)

Prerequisites

There are no formal prerequisites for CCNP Security, but you should have a good understanding of the exam topics before taking the exam.

CCNP candidates often also have three to five years of experience implementing security solutions.

Cisco CCNP® Security

The Implementing and Operating Cisco Security Core Technologies (SCOR) training helps you gain the skills and technologies needed to implement core Cisco security solutions. This training will ready you to provide advanced threat protection against cybersecurity attacks and prepare you for senior-level security roles.

This training prepares you for the 350-701 SCOR v2.0 exam. If passed, you earn the Cisco Certified Specialist - Security Core certification and satisfy the core exam requirement for the Cisco Certified Network Professional (CCNP) Security and Cisco Certified Internetwork Expert (CCIE) Security certifications.

How You'll Benefit

This training will help you:

• Gain hands-on experience implementing core security technologies and learn best practices using Cisco security solutions
• Qualify for professional and expert-level security job roles
• Prepare for the 350-701 SCOR v2.0 exam

What to Expect in the Exam

Implementing and Operating Cisco Security Core Technologies (350-701 SCOR) v2.0 is a 120-minute exam associated with the Cisco Certified Specialist - Security Core certification and satisfies the core exam requirement for the CCNP Security and CCIE Security certifications.

This exam tests your knowledge of implementing and operating core security technologies, including:

• Network security
• Cloud security
• Secure service edge
• Endpoint protection and detection
• Network access
• Visibility
• Enforcements

Prerequisites:

There are no prerequisites for this training. However, the knowledge and skills you are recommended to have before attending this training are:

• Familiarity with Ethernet and TCP/IP networking
• Working knowledge of the Windows operating system
• Working knowledge of Cisco IOS networking and concepts
• Familiarity with basics of networking security concepts

Who Should Attend

The primary audience for this course is as follows:

• Security Engineers
• Network Engineers
• Network Designers
• Network Administrators
• Systems Engineers
• Consulting Systems Engineers
• Technical Solutions Architects
• Cisco Integrators and Partners
• Network Managers
• Program Managers
• Project Managers

Course Objectives

Explain how different threat actors operate by describing their motivations, common attack vectors, typical breach and credential-abuse patterns, and the role of the cyber threat intelligence lifecycle in helping organizations understand and track these evolving threats

Describe how structural weaknesses in software and web applications are identified, classified, and prioritized using concepts such as vulnerability classes, OWASP, CVE, and CVSS, and explain how AI/LLM systems extend this landscape with new vulnerability patterns

Explain why humans and identity remain a primary attack vector by describing social-engineering and credential-theft lifecycles and by outlining the key conceptual defense layers that organizations apply to reduce, but not completely remove, identity-driven risk

Describe the main cryptographic building blocks, hashing, symmetric and asymmetric encryption, key exchange, digital signatures, PKI, and encrypted transport protocols, and explain the specific security guarantees and trust assumptions each introduces into an enterprise design

Explain how Zero Trust, defense in depth, and the Cisco SAFE Blueprint framework together turn threat, vulnerability, identity, and cryptographic insights into a coherent security architecture that assumes failure, limits blast radius, and guides technology placement across the environment

Describe why the Layer 2 access network is a foundational security boundary by explaining how segmentation, topology, addressing, neighbor discovery, and edge-port controls work together to prevent local attacks from undermining higher-layer security

Describe how to secure network infrastructure devices by reducing their attack surface, protecting management and control planes as privileged authority channels, and choosing management-plane architectures that create clear, defensible trust boundaries

Explain how to design and operate AAA for infrastructure administration by choosing appropriate protocols, defining AAA and fallback behavior, and systematically troubleshooting AAA failures to restore secure administrative access

Perform Cisco Secure Firewall Threat Defense Basic Setup

Configure access control policy with intrusion policy, file and malware policy to meet given security requirements

Configure secure site-to-site VPN solutions to establish connectivity between remote sites using Cisco Secure Firewall Threat Defense

Configure remote access VPN solutions on Cisco Secure Firewall Threat Defense to provide secure connectivity to the corporate network for remote users

Evaluate cloud security strategies using NIST 800-145 shared responsibility models, security frameworks, and CASB solutions for multicloud environments

Describe cloud workload security strategies encompassing microsegmentation principles, Cisco Secure Workload, Multicloud Defense platforms, and eBPF-based security approaches

Describe DevSecOps and Infrastructure as Code principles and interpret Python scripts to call security appliances API

Describe SASE and SSE architectures and Cisco Secure Access capabilities providing unified, cloud-delivered protection of private applications and the internet across remote and branch environments

Configure cloud-delivered connectivity, identity-aware authentication, and granular access policies to provide secure access to private applications for remote and branch users

Configure connectivity identity, and security controls to provide secure access to the internet and SaaS applications for remote and branch users

Explain how identity, device context, and policy-driven access control work together in secure network access solutions, and describe how Cisco ISE supports differentiated access through AAA, guest access, profiling, and BYOD

Configure wired and wireless network access control with Cisco ISE by implementing 802.1X and MAB, applying Cisco ISE authentication and authorization policy, selecting appropriate EAP and supplicant approaches, and using RADIUS and CoA to enforce the change access state

Explain how Cisco Duo supports zero-trust principles through strong user verification, device trust, adaptive access policy, and identity-risk visibility with Cisco Identity Intelligence

Explain how Cisco Secure Email Threat Defense is integrated and configured in Microsoft 365-based email environments to provide message visibility, threat analysis, and remediation against phishing, business email compromise, and account takeover

Explain how organizations build, validate, and enforce endpoint trust through device management, asset visibility, compliance and posture assessment, and application control to reduce endpoint security risk

Explain how modern endpoint security, such as Cisco Secure Endpoint with Cisco Secure Malware Analytics, combines prevention, continuous detection, malware analysis, and event-driven investigation by using Endpoint Protection Platform (EPP) and Endpoint Detection and Response (EDR) concepts

Describe how Splunk Enterprise and Splunk Cloud function as data analytics platforms for security operations, explain how Splunk platform components and deployment models support scalable data processing and analytics, construct queries using Splunk Processing Language to search and analyze the ingested data, explain how Cisco security products are integrated into Splunk, and describe how Splunk Enterprise extends the platform with SIEM capabilities

Explain how Splunk SOAR supports SOC operations through orchestration, playbook automation, and case-driven response, and describe how it works with Splunk Enterprise Security and Cisco XDR to automate investigation and response workflows

Explain how XDR unifies threat detection, investigation, and response across multiple security domains, and describe how Cisco XDR provides cross-domain visibility, correlation, prioritization, investigation, and coordinated and automated response across integrated security controls

Course Outline

• Modern Cyber Threat Analysis and Intelligence
• Vulnerabilities, Exploits, and AI Risks
• Social Engineering, Identity Abuse, and Phishing Controls
• Cryptographic Foundations
• Layer 2 Security
• Design Principles: Zero Trust and SAFE
• Device Hardening and Secure Management
• AAA Troubleshooting for Device Admin Access
• Cisco Secure Firewall Threat Defense Deployment
• Cisco Secure Firewall Security Policies
• Site-to-Site VPN Solutions
• Remote Access VPN Solutions
• Cloud Security Models and Frameworks
• Secure Cloud Workloads and eBPF
• DevSecOps and Security Automation
• Zero Trust Identity with Cisco Duo
• SASE and SSE Architecture
• Secure Private Access Implementation
• Secure Internet Access Implementation
• Identity and Access Management Foundations
• Configuring 802.1X, MAB, and CoA with Cisco ISE
• Cisco Secure Email Threat Defense (ETD)
• Endpoint Trust, Compliance, and Device Management
• Modern EDR and Malware Analytics
• Splunk and Security Analytics
• SOC Automation and SOAR
• Extended Detection and Response (XDR)

[ back to top ]

Implementing and Configuring Cisco Identity Services Engine (SISE 300-715 v1.1)

The Implementing and Configuring Cisco Identity Services Engine (SISE) training teaches you to deploy, configure, and operate Cisco® Identity Services Engine (ISE) as the central platform for identity-based access control. Learning begins with the core architecture and installation and progresses through network access control, identity stores, policy design, and day-to-day operations.

You will learn how to configure authentication and authorization policies, create scalable guest onboarding workflows, integrate network devices, and apply identity-based access decisions across wired and wireless environments. It also covers endpoint profiling, posture assessment, Terminal Access Controller Access Control Server (TACACS+) device administration, TrustSec concepts, certificate management, lifecycle operations, and advanced administration practices.

The labs provide you with practical experience in Cisco ISE personas, certificate-based authentication, TEAP (EAP Chaining), Bring Your Own Device (BYOD) onboarding, device profiling, guest services, and policy enforcement in real-world environments. A wide range of use cases are covered, including 802.1X, MAB, and certificate provisioning.

As a result of this training, you will be able to design, implement, and operate a Cisco ISE deployment that meets modern enterprise requirements for identity, security, visibility, and access control.

This training prepares you for the 300-715 SISE v1.2 exam. If passed, you earn the Cisco Certified Specialist - Security Identity Management Implementation certification and satisfy the concentration exam requirement for the Cisco Certified Network Professional (CCNP) Security certification. This training also earns you 32 Continuing Education (CE) credits toward recertification.

This training will help you:

• Gain hands-on experience configuring, deploying, and operating Cisco ISE for identity-based access control in enterprise environments.
• Develop skills to design and implement secure authentication, authorization, guest access, and BYOD onboarding policies for both wired and wireless networks.
• Learn to integrate Cisco ISE with Active Directory, LDAP, and network devices, as well as configure endpoint profiling and compliance-based access controls.
• Acquire troubleshooting techniques for authentication and policy issues using practical labs and reporting tools, improving real-world problem-solving abilities.
• Prepare for the 300-715 SISE v1.2 exam.

What to Expect in the Exam:

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE) v1.2 is a 90-minute exam associated with the Cisco Certified Specialist - Security Identity Management Implementation certification and satisfies the concentration exam requirement for the CCNP Security certification.

This exam tests your knowledge of Cisco ISE, including:

• Architecture and deployment
• Policy enforcement
• Web Auth and guest services
• Profiler
• BYOD
• Endpoint compliance
• Network access device administration

Prerequisites

There are no prerequisites for this training. However, the knowledge and skills you are recommended to have before attending this training are:

• Familiarity with the Cisco IOS® Command-Line Interface (CLI) for wired and wireless network devices
• Familiarity with Cisco Secure Client
• Familiarity with Microsoft Windows operating systems
• Familiarity with 802.1X

These skills can be found in the following Cisco Learning Offering:

• Implementing and Operating Cisco Security Core Technologies (SCOR)

Who Should Attend

The primary audience for this course is as follows:

• Network Security Engineers
• Network Administrators
• Consulting Security Engineers
• Technical Solutions Architects
• Network Managers
• Sales Engineers
• Account Managers

Course Objectives

Upon successful completion of this course, students will be able to meet these overall objectives:

• Describe how Cisco ISE fits into contemporary network security architectures and the main functions, design motivations, and common use cases.
• Examine the functional roles of Cisco ISE node personas, supported deployment models, licensing considerations, and their implications for design planning and scalability decisions.
• Implement the installation workflows, platform requirements, and initial setup steps for deploying Cisco ISE on supported virtual and hardware platforms.
• Evaluate the principles, message flow, and authorization outcomes of 802.1X-based network access, and Cisco ISE's contribution to the security of wired and wireless connections with identity-based controls.
• Describe how MAB works, including its fallback behavior, flow sequence, and policy application within Cisco ISE, and how MAB provides access to non-802.1X-compatible devices.
• Establish the role of NADs in Cisco ISE authentication workflows, and provide an outline of the steps required to add, configure, and validate NADs within Cisco ISE to ensure secure policy enforcement.
• Discuss the role of internal and external identity sources in Cisco ISE, how user and device identities are managed, and how certificates are used for identity-based authentication.
• Evaluate how to configure Cisco ISE to integrate with Active Directory and LDAP, and outline the key settings and connectivity requirements needed to support external user authentication.
• Interpret how Cisco ISE selects identity sources during authentication and the logic and conditions that determine identity store sequences, fallback behavior, and identity normalization techniques.
• Discuss the structure and purpose of policy sets in Cisco ISE, including how global and local constructs interact, how policy sets are matched and evaluated, and how authentication and authorization logic is organized within each policy set.
• Identify how Cisco ISE evaluates authentication policies using rule conditions, identity store sequences, and dictionaries, as well as how behavior is applied when no rules match.
• Interpret how Cisco ISE applies authorization policies following authentication, including how rules are constructed using Conditions Studio and matched against user and device attributes to apply appropriate access profiles.
• Analyze Cisco ISE policies based on logs, RADIUS flow data, and session context to resolve authentication and authorization issues across different access scenarios.
• Analyze how Cisco ISE provides web-based guest access using CWA, and distinguish between hotspot, self-registration, and sponsored access flows.
• Establish global guest settings in Cisco ISE to define account lifecycle behavior, credential policies, communication methods, and access types for guests across supported onboarding processes.
• Configure Cisco ISE guest portals to support different access flows, manage account lifecycles, and implement deployment models that are consistent with organizational policies and scalability requirements.
• Set up sponsor-driven guest access in Cisco ISE via access roles, linking guest types to sponsor groups, and customizing portal behavior to support account creation and approval.
• Establish a clear understanding of Cisco ISE's roles in secure and scalable BYOD access: its enterprise use cases, deployment models, policy-based control strategies, key components, Cisco ISE-specific capabilities, and onboarding designs such as single and dual SSIDs for seamless personal device integration into the network.
• Configure Cisco ISE to deliver supplicants, issue certificates, and enforce policies as part of a complete BYOD onboarding pipeline.
• Operate post-onboarding workflows using the My Device Portal, including revocation of certificates and device de-registration for lost or stolen endpoints.
• Explain how Cisco ISE uses profiling to identify endpoints by taking advantage of classification logic, profiler components, data flows, and feed services to provide the foundation for advanced profiling and policy enforcement.
• Analyze how Cisco ISE collects endpoint data using built-in probes, device sensors, and pxGrid enrichment, and how each method contributes to the accuracy and coverage of profiling.
• Analyze how the profiling policies in Cisco ISE classify endpoints based on collection attributes, and how logical profiles are created and applied to support the decision-making process for determining access based on identity.
• Design scalable profiling solutions by aligning design principles, probe selection, and NAD integration with diverse network environments.
• Maintain visibility of profiling through dashboards and reporting tools, and improve deployment efficiency through optimization techniques.
• Apply foundational understanding of Cisco ISE posture services, including agent types, flow logic, operational modes, and use cases.
• Implement Cisco ISE to deliver posture agents and related resources to endpoints by configuring update services, portals, and delivery policies.
• Administer Cisco ISE policies to ensure secure and compliant network access.
• Test compliance-based access enforcement by simulating a variety of endpoint scenarios using Cisco AnyConnect.
• Assess session behavior, interpret posture outcomes, and analyze reporting tools to confirm the effectiveness of posture policy application and remediation.
• Examine Cisco ISE's use of TACACS+ for securing administrative access, including key AAA concepts and a comparison with RADIUS to illustrate centralized authentication and authorization.
• Set up Cisco ISE for TACACS+-based device administration by configuring policy elements such as command sets, profiles, and policy sets.
• Onboard network devices, define access permissions, and set up authentication and authorization rules to control administrator access.
• Implement advanced TACACS+ authorization logic, implement administrator command access, and implement scalable deployments using proven design guidelines.
• Compare Cisco's TrustSec core architecture, operation, and design considerations, including its enhancements and planning prerequisites for enterprise deployment.
• Configure Cisco TrustSec segmentation in Cisco ISE, including SGT classification, SXP propagation, and tag-based policy enforcement.
• Interpret how to operationalize Cisco ISE through system maintenance, backup and restore procedures, certificate management, and structured upgrades in production environments.

Course Outline:

• Cisco ISE Evolution, Foundation, and Role
• Architecture and Design
• Cisco ISE Installation and Initial Config
• 802.1X in Cisco ISE
• MAB in Cisco ISE
• Network Device Integration with Cisco ISE
• Identity Sources and Authentication Types
• Active Directory and LDAP Integration
• Identity Selection and Resolution Logic
• Cisco ISE Policy Framework
• Authentication Policies
• Authorization Policies
• Troubleshoot Policies and Sessions
• Guest Access Overview
• Guest Access Policies and Settings
• Guest Portals and Lifecycle Operations
• Sponsor Portals
• BYOD Architecture and Use Cases
• BYOD Onboarding with Native Supplicant Provisioning
• BYOD Lifecycle Operations
• Profiling Architecture and Capabilities
• Probes and Data Collection
• Profile Policies and Authorization
• Profile Monitoring and Design
• Posture Service Flow and Agents
• Posture Updates and Client Provisioning
• Posture Policies and Compliance-Based Access
• Posture Testing and Monitoring
• AAA and TACACS+
• TACACS+ Device Administration
• TACACS+ Command Authorization
• Cisco TrustSec Overview
• Cisco TrustSec in Cisco ISE
• Cisco ISE Administration

[ back to top ]

*Cisco Credits can not be used for travel or expense costs.

CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, Cisco IOS, Cisco Systems, the Cisco Systems logo, and Networking Academy are registered trademarks or trademarks of Cisco Systems® and/or its affiliates in the U.S. and certain other countries. All other trademarks mentioned in this web site are the property of their respective owners.

CED Solutions is your best choice for Cisco CCNP Security, Cisco CCNP Security training, Cisco CCNP Security certification, Cisco CCNP Security boot camp, Cisco CCNP Security certification training, Cisco CCNP Security certification course, Cisco CCNP Security course, Cisco CCNP Security class.