Trials and demos
How to buy

Cisco DoD Comply-to-Connect (C2C)

The Cisco DoD Comply-to-Connect (C2C) training teaches you how to implement and deploy a Department of Defense (DoD) Comply-to-Connect network architecture using Cisco Identity Services Engine (ISE). This training covers implementation of 802.1X for both wired and wireless devices and how Cisco ISE uses that information to apply policy control and enforcement. Additionally, other topics like supplicants, non-supplicants, ISE profiler, authentication, authorization, and accounting (AAA) and public key infrastructure (PKI) support, reporting and troubleshooting are covered. The advanced courses content section has been updated to include use cases for new C2C third-party integration topics covering Tenable, MECM, and Trellix.

What you need to know

Continuing Education

Earn 32 CE credits towards recertification

Ways to get this training

Cisco U. Learning Path

Follow a guided Learning Path designed for your certification success. Pre- and post-assessments help you skip what you know and focus on what you need to learn.

View Learning Path

Instructor-led training

Join lively classroom-style learning and discussions, online or in person, that are led by Cisco and our Learning Partners.

Register for instructor-led training
Download the course overview (PDF)

    How you'll benefit

    • Learn how to operate, manage, configure, and troubleshoot the Cisco C2C solution
    • Gain an understanding of how the Cisco ISE security components relate to the C2C architecture

    Who should enroll

    This training is a Department of Defense mandate, ensuring compliance with cybersecurity protocols and procedures. The target audience includes individuals seeking the knowledge and skills involved in deploying, operating, and verifying Cisco DoD C2C network architecture, such as:

    • Network security engineers 
    • Network administrators 
    • Security administrators

    Technology areas

    • Networking
    • Security

    Objectives

    • Define DoD C2C, including its steps and alignment with ISE features/functions and Zero Trust
    • Describe Cisco Identity-Based Networking Services
    • Describe the Cisco Identity Services Engine
    • Explain Cisco ISE deployment
    • Describe Cisco ISE policy enforcement components
    • Describe Cisco ISE policy configuration
    • Explain PKI fundamentals, technology, components, roles, and software supplicants
    • Describe the Cisco ISE profiler service
    • Configure endpoint compliance
    • Configure client posture services
    • Describe profiling best practices and reporting
    • Describe the four main use cases within C2C
    • Troubleshoot Cisco ISE policy and third-party NAD support
    • Describe Cisco ISE TrustSec configurations
    • Configure Cisco ISE device administration

    Prerequisites

    There are no prerequisites for this training. However, the knowledge and skills you are recommended to have before attending this training are:

    • Familiarity with 802.1X
    • Familiarity with Microsoft Windows Operating Systems
    • Familiarity with Cisco IOS CLI for wired and wireless network devices
    • Familiarity with Cisco Identity Service Engine

    These skills can be found in the following Cisco Learning Offering:

    Outline

    • C2C Fundamentals
    • Cisco Identity-Based Networking Services  
    • Introducing Cisco ISE Architecture
    • Introducing Cisco ISE Deployment
    • Introducing Cisco ISE Policy Enforcement Components 
    • Introducing Cisco ISE Policy Configuration 
    • PKI and Advanced Supplicants
    • Introducing the Cisco ISE Profiler 
    • Introducing Cisco ISE Endpoint Compliance Services
    • Configuring Client Posture Services and Compliance
    • Introducing Profiling Best Practices and Reporting
    • C2C Use Cases
    • Troubleshooting Cisco ISE Policy and Third-Party NAD Support
    • Exploring Cisco TrustSec
    • Working with Network Access Devices

    Lab outline

    • Configure Initial Cisco ISE Configuration and System Certificate Usage  
    • Integrate Cisco ISE with Active Directory
    • Configure Cisco ISE Policy for MAB
    • Configure Cisco ISE Policy for 802.1X
    • TEAP on Windows
    • Configure Profiling
    • Customize the Cisco ISE Profiling Configuration
    • Configure Cisco ISE Compliance Services
    • Configure Client Provisioning
    • Configure Posture Policies
    • Test and Monitor Compliance-Based Access
    • Create Cisco ISE Profiling Reports
    • DISA Reports 
    • Certificate-Based Authentication for Cisco ISE Administration 
    • Configure Cisco TrustSec 
    • Configure Cisco ISE for Basic Device Administration
    • Configure Cisco ISE Command Authorization