Trust the best-selling Official Cert Guide series from Cisco Press to help you learn, prepare, and practice for exam success. They are built with the objective of providing assessment, review, and practice to help ensure you are fully prepared for your certification exam.

• Master CCNP Security Identity Management SISE 300-715 exam topics
• Assess your knowledge with chapter-opening quizzes
• Review key concepts with exam preparation tasks

This is the eBook edition of the CCNP Security Identity Management SISE 300-715 Official Cert Guide. This eBook does not include access to the companion website with practice exam that comes with the print edition.

CCNP Security Identity Management SISE 300-715 Official Cert Guide presents you with an organized test preparation routine through the use of proven series elements and techniques. "Do I Know This Already?" quizzes open each chapter and enable you to decide how much time you need to spend on each section. Exam topic lists make referencing easy. Chapter-ending Exam Preparation Tasks help you drill on key concepts you must know thoroughly.

CCNP Security Identity Management SISE 300-715 Official Cert Guide, focuses specifically on the objectives for the CCNP Security SISE exam. Two leading Cisco technology experts share preparation hints and test-taking tips, helping you identify areas of weakness and improve both your conceptual knowledge and hands-on skills. Material is presented in a concise manner, focusing on increasing your understanding and retention of exam topics.

Well regarded for its level of detail, assessment features, comprehensive design scenarios, and challenging review questions and exercises, this official study guide helps you master the concepts and techniques that will enable you to succeed on the exam the first time.

The official study guide helps you master all the topics on the CCNP Security Identity Management SISE 300-715 exam, including:

. Architecture and deployment

. Policy enforcement

. Web Auth and guest services

. Profiler

. BYOD

. Endpoint compliance

. Network access device administration

CCNP Security Identity Management SISE 300-715 Official Cert Guide is part of a recommended learning path from Cisco that includes simulation and hands-on training from authorized Cisco Learning Partners and self-study products from Cisco Press. To find out more about instructor-led training, e-learning, and hands-on instruction offered by authorized Cisco Learning Partners worldwide, please visit http://www.cisco.com/web/learning/index.html

Aaron Woland, CCIE No. 20113, is a Principal Engineer in Cisco's Advanced Threat Security & Integrations group and works with Cisco's Largest Customers all over the world. His primary job responsibilities include security design, solution enhancements, standards development, advanced threat solution design, endpoint security, and futures. Aaron joined Cisco in 2005 and is currently a member of numerous security advisory boards and standards body working groups. Prior to joining Cisco, Aaron spent 12 years as a Consultant and Technical Trainer.

Aaron's other publications include Integrated Security Technologies and Solutions, Volume I; both Volumes I and II of the Cisco ISE for BYOD and Secure Unified Access book; the All-in-one Cisco ASA Firepower Services, NGIPS and AMP book; the CCNP Security SISAS 300-208 Official Cert Guide; the CCNA Security 210-260 Complete Video Course; and many published white papers and design guides. Aaron is one of only five inaugural members of the Hall of Fame Elite for Distinguished Speakers at Cisco Live and is a security columnist for Network World where he blogs on all things related to security. His other certifications include GHIC, GCFE, GSEC, Certified Ethical Hacker, MCSE, VCP, CCSP, CCNP, CCDP, and many other industry certifications.

You can follow Aaron on Twitter: @aaronwoland.

Katherine McNamara, CCIE No. 50931, is a Cybersecurity Technical Solutions Architect at Cisco Systems and has worked with large enterprise and public sector customers. Katherine joined Cisco in 2014 and has worked in IT since 2007 in multiple networking and security roles. She graduated with a Bachelor of Science in IT Security and a Master of Science in Information Security and Assurance. Her many certifications include CCIE Data Center, CCIE Security, MCSE, VCP, CISSP, CCNP, CCDP, and more.

Outside of her day job, she runs a blog called network-node.com, which provides training articles and videos about Cisco Security products. She also helps co-organize the largest Cisco study Meetup group in the world named Routergods.

You can follow Katherine on Twitter: @kmcnam1

Introduction xxxvi

Part I Authentication, Authorization, and Accounting

Chapter 1 Fundamentals of AAA 2

"Do I Know This Already?" Quiz 3

Foundation Topics 5

Comparing and Selecting AAA Options 5

TACACS+ 7

RADIUS 12

Comparing RADIUS and TACACS+ 16

Exam Preparation Tasks 16

Review All Key Topics 16

Define Key Terms 17

Q&A 17

Chapter 2 Identity Management 18

"Do I Know This Already?" Quiz 18

Foundation Topics 20

What Is an Identity? 20

Identity Stores 20

Identity Source Sequences 34

Special Identity Sources 35

Exam Preparation Tasks 36

Review All Key Topics 36

Define Key Terms 36

Q&A 36

Chapter 3 Extensible Authentication Protocol (EAP) over LAN: 802.1X 38

"Do I Know This Already?" Quiz 38

Foundation Topics 41

Extensible Authentication Protocol 41

EAP over LAN (802.1X) 41

Supplicant Options 50

Exam Preparation Topics 73

Review All Key Topics 73

Define Key Terms 74

Q&A 74

Chapter 4 Non-802.1X Authentication 76

"Do I Know This Already?" Quiz 76

Foundation Topics 79

Devices Without a Supplicant 79

MAC Authentication Bypass 80

Web Authentication 83

Remote-Access Connections 88

EasyConnect 89

Exam Preparation Tasks 90

Review All Key Topics 90

Define Key Terms 91

Q&A 91

Chapter 5 Introduction to Advanced Concepts 92 …