Cisco Confidential 2 2011 Cisco and/or its affiliates. All
rights reserved. Solution Overview ATP Coverage Model Opportunity
and Overview Solution Description Packaging and Licensing Channel
Strategy RTM ATP vs.Non-ATP ATP Partner Profile ATP Role
Requirements ATP On-Boarding Process Inviting Partners to the ATP
Completing Online Requirements Checklist Determining Approval
Slide 3
Slide 4
2010 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential 4 TrustSec a core differentiator for a $22B switch
market and $4B WLAN market Visibility and Control Awareness and
visibility of who and what is on network Establish Cisco as trusted
Policy advisor Target: Greenfield Customers Selling an Architecture
= CrossSell BYOD Bring Your Own Device Address challenges
associated with consumerization Negate competitive threats Target:
Wireless Customers Opportunity #1 Opportunity #2 Position ISE
Advanced + Base Offer Position ISE Wireless Offer, expand to
wired
Slide 5
Slide 6
2011 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential A The Solution Client Policy Administration and
Security Services Authentication, Authorization and Enforcement ADD
ON OR REFRESH OPPORTUNITIES Identity Services Engine (ISE) Identity
Access Policy platform Cisco 2900/3560/3700/4500/6500 & Nexus
7000 switches, Wireless and Routing Infrastructure Cisco ASA, ISR,
ASR 1000 NAC Agent Web Agent 802.1x Supplicant No-Cost Persistent
and Temporal Clients for Posture and Remediation AnyConnect or OS-
Embedded Supplicant Different stages of TrustSec/ISE support
Slide 7
Slide 8
2011 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential A PLATFORMS Packaging ISE Advanced Package ISE Base
Package TrustSec Powered Network Switch/ Router
Consultation/Updates Design-Implementation, Subscription Policy
Engine Network Infrastructure Services ISE Wireless Package
Slide 9
2011 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential A Wireless Upgrade License (ATP) Extend Policy for
Wired and VPN Endpoints Wireless License Policy for Wireless
Endpoints 5 Yr Term Licensing Platforms Base License (ATP) Policy
for Wired, Wireless and VPN Endpoints Advanced License (ATP) Policy
for Wired, Wireless and VPN Endpoints Authentication /
Authorization Guest Provisioning Link Encryption Policies Device
Profiling Host Posture Security Group Access Small 3315/1121 |
Medium 3355 | Large 3395 | Virtual Appliance Perpetual Licensing3/5
Yr Term Licensing Packaging
Slide 10
2011 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential A Base License (Availability Through ATP) Advanced +
Base License (Availability Through ATP) Wireless License Default
Customer Offer Cost effective for customer Higher profitability for
partner Customer wants to deploy policy for wireless endpoints only
and wants a partner who is not in ATP Customer wants only Base
features Packaging
Slide 11
Cisco Confidential 11 2011 Cisco and/or its affiliates. All
rights reserved. ISE License TypeFeatures Supported Deployment Type
Supported License Term License Prerequisite ATP Base Authentication
/ Authorization Guest Provisioning Link Encryption Policies Wired
Wireless VPN Perpetual-Yes Advanced Device Profiling Host Posture
Security Group Access Wired Wireless VPN 3 or 5 Year TermsBase
LicenseYes Wireless Authentication / Authorization Guest
Provisioning Link Encryption Policies Device Profiling Host Posture
Security Group Access Wireless 5 Year Term-No Wireless Upgrade
Authentication / Authorization Guest Provisioning Link Encryption
Policies Device Profiling Host Posture Security Group Access
Upgrade from Wireless to support Wired, Wireless, and VPN Same as
the Preinstalled Wireless License Wireless LicenseYes
Slide 12
Cisco Confidential 12 2011 Cisco and/or its affiliates. All
rights reserved. Channel GTM RTM ATP vs.Non-ATP ATP Partner Profile
ATP Role Requirements
Slide 13
2011 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential 13 Why an ATP? Why is the Wireless version of ISE not
in the ATP 2011 Cisco and/or its affiliates. All rights
reserved.
Slide 14
Cisco Confidential 14 Field Experience: ASEC Partners have
limited experience with 801.1X wired deployments Numerous device
types and use cases: 802.1X rollout encompasses many devices with
varying levels of support for 802.1x and TrustSec/ISE features.
(Example: Limited supplicant support in many non-Cisco devices)
Transformational innovation 802.1x is transformational many new
network services are deployed Services provided include support of
AAA, Guest Services, Supplicants, ISE Profiling,and ISE Posture
Assessment. Managing the rollout of these services requires a
phased and well- conceived PDIO process Network segmentation is
often re-architected with ISE/TrustSec deployments due to the
current level of 802.1X adoption An increased scope of the Plan,
Design, Implementation and Operational process (PDIO) is required
for successful deployments
Slide 15
2011 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential 15 Reduced scope of the Plan, Design, Implementation
and Operational process with ISE/Wireless Field Experience: 802.1X
has long been a a pre-requisite for wireless deployments in the
enterprise Fewer device types and use cases : 802.1X rollout is
limited to wireless infrastructure only Incremental innovation vs.
Transformational innovation Existing wireless deployments support
AAA, Guest Services, Supplicants The only net new functionality is
ISE Profiling and ISE Posture Assessment Network segmentation
simpler in wireless due to current 802.1X adoption
Slide 16
Slide 17
Cisco Confidential 17 2011 Cisco and/or its affiliates. All
rights reserved. Program Pre-Requisites Advanced Security
Specialization (required) Advanced R&S (required) Or Borderless
Network Specialization Partner Entry Qualifications: Partners will
be required to have wired 802.1X or NAC appliance deployment
experience Prioritize Partners with Active Directory experience
Prioritize Master Security Certified Partners Prioritize GOLD
certified partners with enterprise/enterprise select customer base
In PRD
Slide 18
Cisco Confidential 18 2011 Cisco and/or its affiliates. All
rights reserved. 1.ROLES: Train and certify the following roles
(role sharing allowed) 1 AM Role 1 SE Role 1 FE Role 2.DESIGN
REQUIREMENTS: Create HLDs for all deployments, and the first 3 are
reviewed by Cisco 3.LAB: Lab/Demo capacity as defined in the ATP
Bill of Materials In PRD
Slide 19
Cisco Confidential 19 2011 Cisco and/or its affiliates. All
rights reserved. RoleCourseworkDelivery Method TimeCost AMOnline
Learning (VODs)ELT15 minsFree SEOnline Learning (VODs) SE Online
Learning Exam [PAISESE 650-474] ELT Online 15 mins 2 hrs 45 mins 45
mins Free $85 FEISE 1.1 (SISE) 802.1X Fundamentals (optional) Exam
[SISE 500-254] Exam [S802DOT1X 650- 472] ILT-Virtual ELT Proctored
Online 5 days 3 days 1 hr 15 mins $3,650 Free $200 $85 TOTAL$4,020
+ $3,620 Demo Cost ($7,640 Total Cost) Program Training & Exam
Cost ISE ATP TRAINING Program Training & Exam Cost * Visit
www.cisco.com/go/iseatp for detailswww.cisco.com/go/iseatp
Slide 20
Thank you.
Slide 21
2011 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential 21 Partner gets invited to participate in ISE ATP Link
to ISE ATP CCO Page Links to online application tool This Partner
Invitation email provides complete instructions on how to fulfill
program requirements by providing links
Slide 22
2011 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential 22 Once the partner has completed the program
requirements, they will be approved via an email (as shown in
sample below) Download Certificate
Slide 23
2011 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential 23 Appendix A Snapshots of Program Requirements
checklist (PRC) from CSApp tool
Slide 24
2011 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential 24 How to become ISE ATP Qualified? Online Program
Requirements Checklist (PRC) Input Partner Contact Name here Sample
Illustration ! Input Mgmt escalation contact here a Partner contact
information
Slide 25
2011 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential 25 How to become ISE ATP Qualified? Online Program
Requirements Checklist (PRC) Sample Illustration ! This field is
auto - populated b Partner specialization requirement
Slide 26
2011 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential 26 How to become ISE ATP Qualified? Online Program
Requirements Checklist (PRC) Names shown if: 1.Testing ID in
Individual profile 2.Individual associated with partner 3.Exam is
complete 4.One week has lapsed so systems are updated Names shown
if: 1.Testing ID in Individual profile 2.Individual associated with
partner 3.Exam is complete 4.One week has lapsed so systems are
updated Exam & Courses will be listed here AM, SE & FE
Training Enter Exam date or Training date Partner training
requirements c
Slide 27
2011 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential 27 Serial Numbers Required Demo gear must be ordered
and received to obtain the serial numbers Serial Numbers Required
Demo gear must be ordered and received to obtain the serial numbers
How to become ISE ATP Qualified? Demo Lab Online Program
Requirements Checklist Partner Lab gear requirements d Make Sure
you SAVE first and then hit NEXT
Slide 28
2011 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential 28 Appendix Snapshots of Partner Education Connection
[PEC] Two options Available to access training topics via PEC:
Option #1 : Going directly to PEC Option #2 : Accessing PEC via ISE
ATP CCO Web Page
Slide 29
2011 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential 29 How to become ISE ATP Qualified? Partner Education
Contains (PEC): Curricula paths Training (VoDs) Lists of live class
offerings Links to Pearson VUE Exams PEC Access
www.cisco.com/go/pec Search For curricula For course or test name
Role Level Training & Exams:
Slide 30
2011 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential 30 How to become ISE ATP Qualified? Go directly to PEC
@ www.cisco.com/go/pec or go to PEC via ISE ATP CCO Web Page @
www.cisco.com/go/iseatp Go directly to PEC @ www.cisco.com/go/pec
or go to PEC via ISE ATP CCO Web Page @ www.cisco.com/go/iseatp
Step 1 Click on ATP
Slide 31
2011 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential 31 How to become ISE ATP Qualified? Step 2 Click on
Account Manager
Slide 32
2011 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential 32 How to become ISE ATP Qualified? Step 3 Click on
Identity Services Engine Account Manager (AM)
Slide 33
2011 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential 33 How to become ISE ATP Qualified? Step 4 Click on
Register for Course
Slide 34
2011 Cisco and/or its affiliates. All rights reserved. Cisco
Confidential 34 How to become ISE ATP Qualified? Role Level
Training & Exams: Step 5 Click on Launch and training VOD will
be available for viewing