Cisco Identity Services Engine (SISE)

The Cisco SISE (300-715) — Implementing and Configuring Cisco Identity Services Engine — is a CCNP Security concentration exam that validates skills in deploying and configuring Cisco ISE for network access control. It covers 802.1X authentication, MAB, profiling, posture assessment, BYOD, guest access, TrustSec, and pxGrid integration — making it the essential certification for security engineers managing zero-trust network access in enterprise environments.

Request Training Email Inquiry

What is the Cisco SISE (300-715)?

Who Should Take This Course?

Network access control engineers working with Cisco ISE
Security engineers implementing zero-trust network access
CCNP Security candidates choosing a security concentration
IT professionals managing BYOD and guest network access
Network engineers implementing 802.1X and NAC solutions
Security architects designing identity-driven access control

What You Will Learn in the 300-715 Course

A comprehensive curriculum covering all exam objectives with hands-on labs and real-world practice.

Architecture and Deployment

Deploy and configure Cisco ISE infrastructure.

ISE node roles: PAN, PSN, MnT, and pxGrid
ISE deployment models: standalone, distributed, and HA
ISE licensing: Essentials, Advantage, Premier tiers
Initial ISE setup: certificates, DNS, NTP, and AD integration

Policy Enforcement

Configure authentication and authorisation policies.

802.1X wired and wireless authentication with EAP methods
MAC Authentication Bypass (MAB) for non-802.1X devices
Authentication policy sets and authorisation profiles
RADIUS CoA (Change of Authorisation) and TACACS+ for device admin

Profiling and Posture

Profile endpoints and enforce posture compliance.

Endpoint profiling: DHCP, HTTP, SNMP, and NetFlow probes
Profiling policies and endpoint identity groups
Posture assessment: agent-based and agentless checks
Remediation actions and compliance enforcement

Guest and BYOD Access

Configure guest portals and BYOD onboarding workflows.

Guest portal types: hotspot, self-registered, sponsored
BYOD onboarding: dual-SSID and single-SSID flows
MDM integration with Cisco ISE
Certificate provisioning for BYOD devices

TrustSec and pxGrid

Implement TrustSec SGT and ecosystem integrations.

Security Group Tags (SGTs) and TrustSec policy matrix
SGT propagation: inline tagging and SXP protocol
pxGrid integration with Cisco StealthWatch and Firepower
ISE integration with Cisco DNA Centre (DNAC)

Course Prerequisites

Pre-requisites training is free when you purchase the course from ProSupport

Cisco CCNA or CCNP SCOR knowledge recommended
2–3 years of network security and access control experience
Familiarity with 802.1X, RADIUS, and Active Directory

Exam Information

Everything you need to know about the 300-715 certification exam.

Exam Component	Details
Exam Name	Implementing and Configuring Cisco Identity Services Engine
Exam Code	300-715 SISE
Exam Type	Multiple Choice, Drag-and-Drop, Fill-in-the-blank
Total Questions	55–65
Passing Score	Passing score varies (typically 800–850 out of 1000)
Exam Duration	90 minutes
Language	English, Japanese
Exam Provider	Pearson VUE (in-person or online proctored)
Exam Focus	ISE deployment, policy enforcement, profiling, posture, guest/BYOD, and TrustSec
Exam Registration	Cisco Certification Tracker or Pearson VUE
Retake Policy	5-day waiting period between attempts; 3-attempt limit within 12 months
Certification Validity	3 years