Cisco Confidential 2 © 2011 Cisco and/or its affiliates. All rights reserved. Solution Overview ATP Coverage Model Opportunity and Overview Solution Description Packaging and Licensing Channel Strategy RTM – ATP vs.Non-ATP ATP Partner Profile ATP Role Requirements ATP On-Boarding Process Inviting Partners to the ATP Completing Online Requirements Checklist Determining Approval

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 4 TrustSec™ – a core differentiator for a $22B switch market and $4B WLAN market “Visibility and Control” Awareness and visibility of who and what is on network Establish Cisco as trusted Policy advisor Target: Greenfield Customers Selling an Architecture = CrossSell “BYOD – Bring Your Own Device” Address challenges associated with consumerization Negate competitive threats Target: Wireless Customers Opportunity #1 Opportunity #2 Position “ISE Advanced + Base” Offer Position “ISE Wireless” Offer, expand to wired

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential A The Solution Client Policy Administration and Security Services Authentication, Authorization and Enforcement ADD ON OR REFRESH OPPORTUNITIES Identity Services Engine (ISE) Identity Access Policy platform Cisco 2900/3560/3700/4500/6500 & Nexus 7000 switches, Wireless and Routing Infrastructure Cisco ASA, ISR, ASR 1000 NAC Agent Web Agent 802.1x Supplicant No-Cost Persistent and Temporal Clients for Posture and Remediation AnyConnect or OS- Embedded Supplicant Different stages of TrustSec/ISE support

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential A PLATFORMS Packaging ISE Advanced Package ISE Base Package TrustSec Powered Network Switch/ Router Consultation/Updates Design-Implementation, Subscription Policy Engine Network Infrastructure Services ISE Wireless Package

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential A Wireless Upgrade License (ATP) Extend Policy for Wired and VPN Endpoints Wireless License Policy for Wireless Endpoints 5 Yr Term Licensing Platforms Base License (ATP) Policy for Wired, Wireless and VPN Endpoints Advanced License (ATP) Policy for Wired, Wireless and VPN Endpoints Authentication / Authorization Guest Provisioning Link Encryption Policies Device Profiling Host Posture Security Group Access Small 3315/1121 | Medium 3355 | Large 3395 | Virtual Appliance Perpetual Licensing3/5 Yr Term Licensing Packaging

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential A Base License (Availability Through ATP) Advanced + Base License (Availability Through ATP) Wireless License Default Customer Offer Cost effective for customer Higher profitability for partner Customer wants to deploy policy for wireless endpoints only and wants a partner who is not in ATP Customer wants only “Base” features Packaging

Cisco Confidential 11 © 2011 Cisco and/or its affiliates. All rights reserved. ISE License TypeFeatures Supported Deployment Type Supported License Term License Prerequisite ATP Base  Authentication / Authorization  Guest Provisioning  Link Encryption Policies  Wired  Wireless  VPN Perpetual-Yes Advanced  Device Profiling  Host Posture  Security Group Access  Wired  Wireless  VPN 3 or 5 Year TermsBase LicenseYes Wireless  Authentication / Authorization  Guest Provisioning  Link Encryption Policies  Device Profiling  Host Posture  Security Group Access  Wireless 5 Year Term-No Wireless Upgrade  Authentication / Authorization  Guest Provisioning  Link Encryption Policies  Device Profiling  Host Posture  Security Group Access  Upgrade from Wireless to support Wired, Wireless, and VPN Same as the Preinstalled Wireless License Wireless LicenseYes

Cisco Confidential 12 © 2011 Cisco and/or its affiliates. All rights reserved. Channel GTM RTM – ATP vs.Non-ATP ATP Partner Profile ATP Role Requirements

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13 Why an ATP? Why is the Wireless version of ISE not in the ATP © 2011 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential 14 Field Experience: ASEC Partners have limited experience with 801.1X wired deployments Numerous device types and use cases: 802.1X rollout encompasses many devices with varying levels of support for 802.1x and TrustSec/ISE features. (Example: Limited supplicant support in many non-Cisco devices) Transformational innovation 802.1x is transformational – many new network services are deployed –Services provided include support of AAA, Guest Services, Supplicants, ISE Profiling,and ISE Posture Assessment. –Managing the rollout of these services requires a phased and well- conceived PDIO process Network segmentation is often re-architected with ISE/TrustSec deployments due to the current level of 802.1X adoption An increased scope of the Plan, Design, Implementation and Operational process (PDIO) is required for successful deployments

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15 Reduced scope of the Plan, Design, Implementation and Operational process with ISE/Wireless Field Experience: 802.1X has long been a a pre-requisite for wireless deployments in the enterprise Fewer device types and use cases : 802.1X rollout is limited to wireless infrastructure only Incremental innovation vs. Transformational innovation Existing wireless deployments support AAA, Guest Services, Supplicants – The only net new functionality is ISE Profiling and ISE Posture Assessment Network segmentation simpler in wireless due to current 802.1X adoption

Cisco Confidential 17 © 2011 Cisco and/or its affiliates. All rights reserved. Program Pre-Requisites Advanced Security Specialization (required) Advanced R&S (required) Or Borderless Network Specialization Partner Entry Qualifications: Partners will be required to have wired 802.1X or NAC appliance deployment experience Prioritize Partners with Active Directory experience Prioritize Master Security Certified Partners Prioritize GOLD certified partners with enterprise/enterprise select customer base In PRD

Cisco Confidential 18 © 2011 Cisco and/or its affiliates. All rights reserved. 1.ROLES: Train and certify the following roles (role sharing allowed) 1 AM Role 1 SE Role 1 FE Role 2.DESIGN REQUIREMENTS: Create HLDs for all deployments, and the first 3 are reviewed by Cisco 3.LAB: Lab/Demo capacity as defined in the ATP Bill of Materials In PRD

Cisco Confidential 19 © 2011 Cisco and/or its affiliates. All rights reserved. RoleCourseworkDelivery Method TimeCost AMOnline Learning (VODs)ELT15 minsFree SEOnline Learning (VODs) SE Online Learning Exam [PAISESE ] ELT Online 15 mins 2 hrs 45 mins 45 mins Free $85 FEISE 1.1 (SISE) 802.1X Fundamentals (optional) Exam [SISE ] Exam [S802DOT1X ] ILT-Virtual ELT Proctored Online 5 days 3 days 1 hr 15 mins $3,650 Free $200 $85 TOTAL$4,020 + $3,620 Demo Cost ($7,640 Total Cost) Program Training & Exam Cost ISE ATP TRAINING Program Training & Exam Cost * Visit for detailswww.cisco.com/go/iseatp

Thank you.

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 21  Partner gets invited to participate in ISE ATP Link to ISE ATP CCO Page Links to online application tool This Partner Invitation provides complete instructions on how to fulfill program requirements by providing links

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 22  Once the partner has completed the program requirements, they will be approved via an (as shown in sample below) Download Certificate

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 23 Appendix A Snapshots of Program Requirements checklist (PRC) from CSApp tool

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 24 How to become ISE ATP Qualified? Online – Program Requirements Checklist (PRC) Input Partner Contact Name here Sample Illustration ! Input Mgmt escalation contact here a Partner contact information

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 25 How to become ISE ATP Qualified? Online – Program Requirements Checklist (PRC) Sample Illustration ! This field is auto - populated b Partner specialization requirement

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 26 How to become ISE ATP Qualified? Online – Program Requirements Checklist (PRC) Names shown if: 1.Testing ID in Individual profile 2.Individual associated with partner 3.Exam is complete 4.One week has lapsed so systems are updated Names shown if: 1.Testing ID in Individual profile 2.Individual associated with partner 3.Exam is complete 4.One week has lapsed so systems are updated Exam & Courses will be listed here AM, SE & FE Training Enter Exam date or Training date Partner training requirements c

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 27 Serial Numbers Required Demo gear must be ordered and received to obtain the serial numbers Serial Numbers Required Demo gear must be ordered and received to obtain the serial numbers How to become ISE ATP Qualified? Demo Lab – Online Program Requirements Checklist Partner Lab gear requirements d Make Sure you “SAVE” first and then hit “NEXT”

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 28 Appendix Snapshots of Partner Education Connection [PEC] Two options Available to access training topics via PEC: Option #1 : Going directly to PEC Option #2 : Accessing PEC via ISE ATP CCO Web Page

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 29 How to become ISE ATP Qualified? Partner Education Contains (PEC): Curricula paths Training (VoDs) Lists of live class offerings Links to Pearson VUE Exams PEC Access Search For curricula For course or test name Role Level Training & Exams:

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 30 How to become ISE ATP Qualified? Go directly to or go to PEC via ISE ATP CCO Web Go directly to or go to PEC via ISE ATP CCO Web Step 1 Click on “ATP”

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 31 How to become ISE ATP Qualified? Step 2 Click on Account Manager

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 32 How to become ISE ATP Qualified? Step 3 Click on “Identity Services Engine –Account Manager (AM)

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 33 How to become ISE ATP Qualified? Step 4 Click on “Register for Course”

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 34 How to become ISE ATP Qualified? Role Level Training & Exams: Step 5 Click on “Launch” and training VOD will be available for viewing