This is a Cisco Identity Service Engine (ISE) version 2.6 lab migrating to version ISE 3.1. In this lab, we will show how to migrate an ISE server to version 3.1. After migrating, we will step through how to setup basic policy including: Authentication, Authorization and MAB. This setup will show some of the differences between ISE 2.X UI and the new 3.X UI as well as make note of best practices, and how to avoid common pitfalls with this migration.

This lab is a fully configured lab & can be used for exploration and demonstration to showcase Cisco DNA software-delivery approach in automating and assuring services across thew campus, WAN and branch networks. Based on an open and extensible platform, Cisco DNA allows one to build value on the network, so it can streamline operations and facilitate IT and business innovation.

Cisco DNA takes a software-delivered approach to automating and assuring services across your campus, WAN and branch networks. Based on an open and extensible platform, Cisco DNA allows you to build value on the network, so you can streamline operations and facilitate IT and business innovation.

Cisco DNA takes a software-delivered approach to automating and assuring services across your campus, WAN and branch networks. Based on an open and extensible platform, Cisco DNA allows you to build value on the network, so you can streamline operations and facilitate IT and business innovation.

The purpose of this lab is to demo how NGINX Controller API Management Module and NGINX App Protect can secure the OAuth Authorization Code flow, which is core to Open Banking specifications. The NGINX App Protect will be deployed as an Ingress Controller for Kubernetes and will provide both negative and positive security by ingesting the OpenAPI declaration file. The NGINX API Gateway will be controlled by NGINX Controller, will publish the application API based on the same OpenAPI declaration file, will provide JWT authentication and authorization and enforce rate limiting. The deployment and configuration of these elements will be performed automatically through a CI/CD pipeline. ELK dashboards will be used for visualization purposes and, lastly, a DAST tool will also be run as part of the CI/CD pipeline. BIG-IP APM is deployed as both Authorization Server with OpenID Connect support and as OAuth Client, in separate instances.

This is an on-demand lab to demonstrate the basic features and functionality of the CyberArk Privileged Access Security solution.

This lab features Beyond Identity which is an authentication solution that uses device-bound credentials for zero-friction passwordless authentication. Beyond Identity is a cloud-native platform that uses Authenticators downloaded on endpoints which registers a users credentials and collects signals on the endpoint to capture device security posture for authentication.