SISE-300-715 · Module
Cisco TrustSec: SGT Classification, Propagation & Enforcement
6 lessons, 0 written.
SISE-300-715 Lessons in This Module
01 M4 · Lab 1: Prepare the TrustSec Domain — SGT-Capable Switch, PAC Provisioning & Environment Data In Production 02 Cisco TrustSec: Classification, Propagation & Enforcement — the Three-Phase Model In Production 03 SGT Classification: Dynamic Assignment via Authorization Profile, Static IP/Subnet/VLAN Mappings & the SGT Database In Production 04 Propagating SGTs: Inline Tagging (CMD) vs SXP — Speaker/Listener Peers, the PAC Exchange & Environment Data Download In Production 05 Enforcement: SGACLs, the ISE Policy Matrix, Egress Policy Download & SGT-Based Firewall Rules In Production 06 pxGrid Context Sharing: Publishing Session and SGT Context to Subscribers In Production Lab state
Where this module picks the lab up, and what it hands on.
🔬 At module entry
Continues from sise-wireless-dot1x.
💾 At module exit
The lab is left at the end state of pxGrid Context Sharing: Publishing Session and SGT Context to Subscribers. Tear nothing down — the next module builds on it.
Devices in scope: SW-ACCESS-01 · ISE-01 · FTD-EDGE-01 · WS-ADMIN-01 · WS-INSIDE-01 · WS-INSIDE-02 · FMC-01
Workbook & cheat sheet
The printable module cheat sheet is not built yet — the print stylesheet is listed as open work in DESIGN-SYSTEM.md §7.