Implementing Cisco Secure Access Control System(ACS)

ACS is a three day immersion into designing, implementing, and troubleshooting Cisco's Secure ACS Solution.  The course teaches students how to provide secure access to network resources using the Cisco Secure Access Control System 5.2, interoperating with security features in Cisco's IOS Software.  Students will gain a thorough understanding of the operation of the Cisco Secure ACS to control access to network services and devices.

The knowledge and skills that a student must have before attending this course are as follows:

• CCNA Certification or equivalent knowledge/experience

• Working knowledge of the Microsoft Windows operating system

Also recommended:

• IINS Certification or equivalent knowledge/experience

Primary Audience:

• Security professionals, security architechts, security engineeers, and network administrators responsible for securing their networks to assure authorized access only by authenticated users, with accounting of their activities

Secondary Audience:

• Cisco channel partners who sell, implement, and maintain Cisco ACS Solutions

• Cisco engineers who support the sale of Cisco ACS solutions

Upon successful completion of this course, students will be able to meet these overall objectives:

• Understand how the RADIUS and TACACS+ protocols operate and what purpose they serve

• Be familiar with all present ACS Solutions

• Main Components of ACS

• How to install ACS 5.2

• How to use a Setup Script

• How Licensing works with the ACS

• Understand how Attributes, Value Types, and Predefined Values are used

• The different types of AAA Clients and how they access Network Resources and AAA Clients

• How to work with a Local Identity Store & Identity Store Sequence

• Understand Users and Identity Stores

• Configure an External Identity Store with LDAP

• The fundamentals of LDAP

• How to setup LDAP SSL

• How to set up an External Identity Store with Active Directory

• How to perform Authentication - Command Authorization

• Accounting with TACACS

• How to monitor and troubleshoot ACS (AAA with TACACS+)

• Replacing digital certificates self-signed by ACS using a local Certificate Authority

• Introduction to IEEE 802.1X and EAP

• 802.1X and Windows XP

• Single Host Authentication

• 802.1X - Single Host Authentication

• 802.1X troubleshooting

Module 1:  Identity Management Solution Overview

Module 2:  Product Overview and Initial Configuration

Module 3:  Advanced ACS Configuration and Device Management

Module 4:  IEEE 802.1X with ACS 5.2

Module 5:  System Operations