Slide 1

Slide 2

Cisco Confidential 2 2011 Cisco and/or its affiliates. All rights reserved. Solution Overview ATP Coverage Model Opportunity and Overview Solution Description Packaging and Licensing Channel Strategy RTM ATP vs.Non-ATP ATP Partner Profile ATP Role Requirements ATP On-Boarding Process Inviting Partners to the ATP Completing Online Requirements Checklist Determining Approval

Slide 3

Slide 4

2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 4 TrustSec a core differentiator for a $22B switch market and $4B WLAN market Visibility and Control Awareness and visibility of who and what is on network Establish Cisco as trusted Policy advisor Target: Greenfield Customers Selling an Architecture = CrossSell BYOD Bring Your Own Device Address challenges associated with consumerization Negate competitive threats Target: Wireless Customers Opportunity #1 Opportunity #2 Position ISE Advanced + Base Offer Position ISE Wireless Offer, expand to wired

Slide 5

Slide 6

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential A The Solution Client Policy Administration and Security Services Authentication, Authorization and Enforcement ADD ON OR REFRESH OPPORTUNITIES Identity Services Engine (ISE) Identity Access Policy platform Cisco 2900/3560/3700/4500/6500 & Nexus 7000 switches, Wireless and Routing Infrastructure Cisco ASA, ISR, ASR 1000 NAC Agent Web Agent 802.1x Supplicant No-Cost Persistent and Temporal Clients for Posture and Remediation AnyConnect or OS- Embedded Supplicant Different stages of TrustSec/ISE support

Slide 7

Slide 8

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential A PLATFORMS Packaging ISE Advanced Package ISE Base Package TrustSec Powered Network Switch/ Router Consultation/Updates Design-Implementation, Subscription Policy Engine Network Infrastructure Services ISE Wireless Package

Slide 9

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential A Wireless Upgrade License (ATP) Extend Policy for Wired and VPN Endpoints Wireless License Policy for Wireless Endpoints 5 Yr Term Licensing Platforms Base License (ATP) Policy for Wired, Wireless and VPN Endpoints Advanced License (ATP) Policy for Wired, Wireless and VPN Endpoints Authentication / Authorization Guest Provisioning Link Encryption Policies Device Profiling Host Posture Security Group Access Small 3315/1121 | Medium 3355 | Large 3395 | Virtual Appliance Perpetual Licensing3/5 Yr Term Licensing Packaging

Slide 10

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential A Base License (Availability Through ATP) Advanced + Base License (Availability Through ATP) Wireless License Default Customer Offer Cost effective for customer Higher profitability for partner Customer wants to deploy policy for wireless endpoints only and wants a partner who is not in ATP Customer wants only Base features Packaging

Slide 11

Cisco Confidential 11 2011 Cisco and/or its affiliates. All rights reserved. ISE License TypeFeatures Supported Deployment Type Supported License Term License Prerequisite ATP Base Authentication / Authorization Guest Provisioning Link Encryption Policies Wired Wireless VPN Perpetual-Yes Advanced Device Profiling Host Posture Security Group Access Wired Wireless VPN 3 or 5 Year TermsBase LicenseYes Wireless Authentication / Authorization Guest Provisioning Link Encryption Policies Device Profiling Host Posture Security Group Access Wireless 5 Year Term-No Wireless Upgrade Authentication / Authorization Guest Provisioning Link Encryption Policies Device Profiling Host Posture Security Group Access Upgrade from Wireless to support Wired, Wireless, and VPN Same as the Preinstalled Wireless License Wireless LicenseYes

Slide 12

Cisco Confidential 12 2011 Cisco and/or its affiliates. All rights reserved. Channel GTM RTM ATP vs.Non-ATP ATP Partner Profile ATP Role Requirements

Slide 13

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13 Why an ATP? Why is the Wireless version of ISE not in the ATP 2011 Cisco and/or its affiliates. All rights reserved.

Slide 14

Cisco Confidential 14 Field Experience: ASEC Partners have limited experience with 801.1X wired deployments Numerous device types and use cases: 802.1X rollout encompasses many devices with varying levels of support for 802.1x and TrustSec/ISE features. (Example: Limited supplicant support in many non-Cisco devices) Transformational innovation 802.1x is transformational many new network services are deployed Services provided include support of AAA, Guest Services, Supplicants, ISE Profiling,and ISE Posture Assessment. Managing the rollout of these services requires a phased and well- conceived PDIO process Network segmentation is often re-architected with ISE/TrustSec deployments due to the current level of 802.1X adoption An increased scope of the Plan, Design, Implementation and Operational process (PDIO) is required for successful deployments

Slide 15

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15 Reduced scope of the Plan, Design, Implementation and Operational process with ISE/Wireless Field Experience: 802.1X has long been a a pre-requisite for wireless deployments in the enterprise Fewer device types and use cases : 802.1X rollout is limited to wireless infrastructure only Incremental innovation vs. Transformational innovation Existing wireless deployments support AAA, Guest Services, Supplicants The only net new functionality is ISE Profiling and ISE Posture Assessment Network segmentation simpler in wireless due to current 802.1X adoption

Slide 16

Slide 17

Cisco Confidential 17 2011 Cisco and/or its affiliates. All rights reserved. Program Pre-Requisites Advanced Security Specialization (required) Advanced R&S (required) Or Borderless Network Specialization Partner Entry Qualifications: Partners will be required to have wired 802.1X or NAC appliance deployment experience Prioritize Partners with Active Directory experience Prioritize Master Security Certified Partners Prioritize GOLD certified partners with enterprise/enterprise select customer base In PRD

Slide 18

Cisco Confidential 18 2011 Cisco and/or its affiliates. All rights reserved. 1.ROLES: Train and certify the following roles (role sharing allowed) 1 AM Role 1 SE Role 1 FE Role 2.DESIGN REQUIREMENTS: Create HLDs for all deployments, and the first 3 are reviewed by Cisco 3.LAB: Lab/Demo capacity as defined in the ATP Bill of Materials In PRD

Slide 19

Cisco Confidential 19 2011 Cisco and/or its affiliates. All rights reserved. RoleCourseworkDelivery Method TimeCost AMOnline Learning (VODs)ELT15 minsFree SEOnline Learning (VODs) SE Online Learning Exam [PAISESE 650-474] ELT Online 15 mins 2 hrs 45 mins 45 mins Free $85 FEISE 1.1 (SISE) 802.1X Fundamentals (optional) Exam [SISE 500-254] Exam [S802DOT1X 650- 472] ILT-Virtual ELT Proctored Online 5 days 3 days 1 hr 15 mins $3,650 Free $200 $85 TOTAL$4,020 + $3,620 Demo Cost ($7,640 Total Cost) Program Training & Exam Cost ISE ATP TRAINING Program Training & Exam Cost * Visit www.cisco.com/go/iseatp for detailswww.cisco.com/go/iseatp

Slide 20

Thank you.

Slide 21

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 21 Partner gets invited to participate in ISE ATP Link to ISE ATP CCO Page Links to online application tool This Partner Invitation email provides complete instructions on how to fulfill program requirements by providing links

Slide 22

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 22 Once the partner has completed the program requirements, they will be approved via an email (as shown in sample below) Download Certificate

Slide 23

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 23 Appendix A Snapshots of Program Requirements checklist (PRC) from CSApp tool

Slide 24

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 24 How to become ISE ATP Qualified? Online Program Requirements Checklist (PRC) Input Partner Contact Name here Sample Illustration ! Input Mgmt escalation contact here a Partner contact information

Slide 25

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 25 How to become ISE ATP Qualified? Online Program Requirements Checklist (PRC) Sample Illustration ! This field is auto - populated b Partner specialization requirement

Slide 26

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 26 How to become ISE ATP Qualified? Online Program Requirements Checklist (PRC) Names shown if: 1.Testing ID in Individual profile 2.Individual associated with partner 3.Exam is complete 4.One week has lapsed so systems are updated Names shown if: 1.Testing ID in Individual profile 2.Individual associated with partner 3.Exam is complete 4.One week has lapsed so systems are updated Exam & Courses will be listed here AM, SE & FE Training Enter Exam date or Training date Partner training requirements c

Slide 27

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 27 Serial Numbers Required Demo gear must be ordered and received to obtain the serial numbers Serial Numbers Required Demo gear must be ordered and received to obtain the serial numbers How to become ISE ATP Qualified? Demo Lab Online Program Requirements Checklist Partner Lab gear requirements d Make Sure you SAVE first and then hit NEXT

Slide 28

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 28 Appendix Snapshots of Partner Education Connection [PEC] Two options Available to access training topics via PEC: Option #1 : Going directly to PEC Option #2 : Accessing PEC via ISE ATP CCO Web Page

Slide 29

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 29 How to become ISE ATP Qualified? Partner Education Contains (PEC): Curricula paths Training (VoDs) Lists of live class offerings Links to Pearson VUE Exams PEC Access www.cisco.com/go/pec Search For curricula For course or test name Role Level Training & Exams:

Slide 30

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 30 How to become ISE ATP Qualified? Go directly to PEC @ www.cisco.com/go/pec or go to PEC via ISE ATP CCO Web Page @ www.cisco.com/go/iseatp Go directly to PEC @ www.cisco.com/go/pec or go to PEC via ISE ATP CCO Web Page @ www.cisco.com/go/iseatp Step 1 Click on ATP

Slide 31

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 31 How to become ISE ATP Qualified? Step 2 Click on Account Manager

Slide 32

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 32 How to become ISE ATP Qualified? Step 3 Click on Identity Services Engine Account Manager (AM)

Slide 33

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 33 How to become ISE ATP Qualified? Step 4 Click on Register for Course

Slide 34

2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 34 How to become ISE ATP Qualified? Role Level Training & Exams: Step 5 Click on Launch and training VOD will be available for viewing